Domain Functional Level Rollback
In the above example i have downgraded the domain functional level to windows server 2008.
Domain functional level rollback. How to create an ad user in a specific ou. Enter and execute the following command in windows powershell to lower the dfl of the root. Active directory recycle bin disabled.
You take a system state back up of one dc in each domain in the. Downgrading the domain functional level. How to downgrade forest and domain functional levels.
Karim buzdar powershell windows windows server 2012 r2 windows server 2016 no comments powershell. Also right click on the active directory domains and trusts and select. In this lab i had the domain and forest functional level set to server 2016.
In our example we have a single. The ffl was successfully lowered to windows server 2008 while the dfl for all domains are still on windows server 2016. The domain functional level is programmatically raised to the second functional level by directly modifying the value of the msdsbehaviorversion attribute on the domaindns object.
Even after all this however there is a great concern about the change being irreversible so that you must have a rollback plan just in case something unforeseen and catastrophic occurs to active directory. Professor robert mcmillen shows you how to roll back forest and domain in windows server. They also determine which windows server operating systems you can run on domain controllers in the domain or forest.
The domain functional level is raised to the second functional level by using the ldp exe utility or the adsiedit msc utility. When attempting to downgrade lower the dfl of a domain you would first need to downgrade the ffl to the same level as the required dfl to be configured. However functional levels do not affect which operating systems you can run on workstations and member servers that are joined to the domain or forest.