Upgrade Domain Functional Level From 2008 To 2016
The second restriction for which there is a limited exception on windows server 2008 r2 is that once upgraded the domain or forest functional level cannot later be downgraded.
Upgrade domain functional level from 2008 to 2016. Dcs can support automatic rolling of the ntlm and other password based secrets on a user account configured to require pki authentication. As has already been shown this is generally a bad idea. After you set the domain functional level to a certain value in windows server 2008 r2 you cannot roll back or lower the domain functional level with one exception.
Starting in windows server 2008 r2 however. Windows server 2016 domain functional level features. Open active directory domains and trusts domain msc.
Sign in to the domain controller holding the pdc emulator fsmo role. Windows server 2016 windows server 2012 r2 windows server 2012. In the left navigation pane right click the domain for which you want to raise the functional level and then click raise domain functional level.
After you set the domain functional level to a certain value you cannot roll back or lower the domain functional level with the following exceptions. If you are upgrading from windows server 2008 r2 ffl you can lower it back to windows server 2008 r2. The only purpose that having such ability would serve would be so that downlevel dcs could be added to the domain.
This configuration is also known as smart card required for. When you raise the domain functional level to windows server 2016 and if the forest functional level is windows server 2012 or lower you. When you raise the domain functional level to windows server 2008 r2 and if the forest functional level is windows server 2008 or lower you have the option of rolling the domain functional level back to windows server 2008.
All default active directory features all features from the windows server 2012r2 domain functional level plus the following features. Before you can raise domain and forest functional levels you have to evaluate your current environment and identify the functional level requirement that best meets the needs of your organization. Assess your current environment by identifying the domains in your forest the domain controllers that are located in.