Domain Functional Level Upgrade

Die folgenden tabelle stellt dar wie sich die windows server versionen bezüglich domain functional levels geändert haben.

Domain functional level upgrade. Feature set of a particular dfl will be available for a dc if it runs on the operating system version that is compatible with the functional level. After upgrading all dcs in the domain or forest the administrator is able to raise the functional level and this level acts as a flag informing the dcs and other components as well that certain features can now be enabled. Windows server 2003 active directory permits a special forest and domain functional level that is named windows server 2003 interim.

In 2003 functional level the kerberos key distribution centre kdc used either rc4 hmac 128 bit or des cbc md5 56 bit for kerberos encryption however when moving to 2008 domain functional level or higher you upgrade the key distribution centre kdc to use advanced kerberos encryption which uses aes 128 and aes 256 encryption. Windows server applies to. When the domain functional level is raised it not possible to promote operating systems that are running earlier versions of the os.

Domain functional level dfl determines the features of a domain controller dc based on the windows server operating system os it runs on. It is a good idea to know that during the process of raising the domain functional level dfl of your active directory structure from 2003 the krbtgt account password gets changed. This password replication is a separate change within ad and occurs after the dfl has been raised.

Doing this saves time and enables all the forest level and domain level features in windows server 2008. Welche domain controller bei welchem domain functional level unterstützt werden geht ebenfalls auf der liste hervor. This functional level is provided for upgrades of existing windows nt 4 0 domains where one or more windows nt 4 0 backup domain controllers bdcs must function after the upgrade.

Dieses thema enthält hintergrundinformationen zu active directory domain services in windows server 2016 und erläutert den prozess zum aktualisieren von domänen controllern. However if you want all domain controllers in your new windows server 2008 environment to run windows server 2008 set the forest functional level and then the domain functional level to windows server 2008 when you install the first domain controller in your forest. Dieser artikel beschreibt das auslösen der domänen und gesamtstrukturfunktionsebenen die von microsoft windows server 2003 basierten oder neuer domänencontroller unterstützt.