Active Directory : increase the functional level of the domain and the forest

Presentation

The functional level of the domain and forest corresponds to the “version” of your Active Directory environment and allows access to more or fewer features depending on the level of each.

Mainly this level change occurs when upgrading to Windows when replacing / migrating domain controllers. The version change may also be necessary for the installation of new service like Exchange, ADFS …

Before making this change, it must be verified that your environment will support the functional level increase.

Example: If you want to upgrade from 2003 to 2012, all domain controllers should at least work with Windows Server 2012.

Here are some notable features brought up during version upgrades:

  • Replication of sysvol with DFS-R: Domain in 2008 level
  • Active Directory Recycle Bin: Fence at 2008R2 level

The following manipulations are to be done on a domain controller.

Increase the functional level of the domain

Open the Active Directory Users and Computers console, right click on domain 1 and click on Increase functional level of domain 2 .
Augmenter le niveau fonctionnel / Increase the functional level

Choose target level 1 according to your environment and click Increase 2 .
Select level

Confirm the increase by clicking OK 1 .
Confirm level up

A confirmation message appears, close the window by clicking OK 1 .
Niveau fonctionnel augmenté / Functional level increased

Increase the functional level of the forest

Open the Active Directory Domains and Trusts console, right-click Domains and Active Directory Approval 1 , and click Increase Functional Level of Forest 2 .
Console domains and approvals

Choose the forest target level 1 and click Increase 2 .
forest level

Confirm the increase in the functional level of the forest by clicking OK 1 .
Confirm

A confirmation message appears, close the window by clicking OK 1 .
Increased level

It would have been possible to increase the functional level of the domain from this console, by right click on the domain

Complements

Increase the functional level of the domain and the forest with the ADAC console

It is also possible to use the Active Directory Administrative Center (ADAC). From the console, click on domain 1 .

In the Tasks / <domain name> column, you can access functional level increases for forest 1 and domain 2 .
augmenter le niveau fonctionnel / increase the functional level

Select level 1 and click on OK 2 . Validate confirmation messages.
select level

Show functional level

Graphic

From Active Directory Users and Computers, Active Directory Domains and Trust, or Active Directory Administrative Center, right-click the domain and click Properties.

PowerShell

Forest:

(Get-ADForest).ForestMode

Domain :

(Get-ADDomain).DomainMode

 



Related Posts


Active directory: How to set up a child domain

In this tutorial, we will see how to put a child domain in an Active Directory tree. A child domain is a subdomain of one of the component domains in your Active Directory forest. Subdomain segmentati

Rename a domain controller

Intro In this tutorial, we will see how to rename domain controller in the "rules of the art". The name change happens in several times, here is a summary: Add a secondary name to the DCPermutation of

Azure AD Connect: Installing and configuring synchronization

Azure AD Connect Overview In this article, I will explain how to install and configure Azure AD Connect. This solution allows you to synchronize your local directory (AD) to the Azure platform and use