Skip to content

VirtuallyThatGuy

Anything VMware , PowerCLI, PowerShell, Automation and some Windows

Menu
  • Home
  • PowerCLI
  • VMware
  • Automation
  • Windows
  • About
Menu

How To Raise the Forest and Domain Functional Levels in Windows Server 2008/2012/2019/R2 – VirtuallyThatGuy

Posted on 2 September 20216 December 2022 by VirtuallyThatGuy

By default, when a new Domain Controller with Windows Server 2008 / Windows Server 2008 R2 is being installed, the lowest available functional level is Windows 2000. The Default selected forest functional level is Windows Server 2003

http://www.elmajdal.net/Win2k8/How_To_Raise_the_Forest_and_Domain_Functional_Levels_in_Windows_Server_2008_R2/Default%20Forest%20Function%20Level%202.png    http://www.elmajdal.net/Win2k8/How_To_Raise_the_Forest_and_Domain_Functional_Levels_in_Windows_Server_2008_R2/Default%20Domain%20Function%20Level2.png

When you create a new domain or a new forest, set the domain and forest functional levels to the highest values that you know your environment can support. This way, you can take advantage of as many AD DS features as possible.

If you are sure that no domain controllers that run Windows Server 2008 (or any earlier operating system) will ever be added to the domain or forest, select the Windows Server 2008 R2 functional level

To raise the functional level of the Forest and functional level of the Domain , follow the below Steps:

  • Raising the Functional Level of the Forest:

  • Open Active Directory Domains and Trusts 

    Click Start > Administrative Tools > Active Directory Domains and Trusts

    http://www.elmajdal.net/Win2k8/How_To_Raise_the_Forest_and_Domain_Functional_Levels_in_Windows_Server_2008_R2/AD%20DT.png

    The Active Directory Domains and Trusts Management Console  will display the available Domains


    http://www.elmajdal.net/Win2k8/How_To_Raise_the_Forest_and_Domain_Functional_Levels_in_Windows_Server_2008_R2/AD%20DT%20MMC.png

  • Right click on the Active Directory Domains and Trusts [ ComputerName.DomainName.com ] main node , and click on Raise Forest Functional Level...

    http://www.elmajdal.net/Win2k8/How_To_Raise_the_Forest_and_Domain_Functional_Levels_in_Windows_Server_2008_R2/right%20click%20-%20raise%20forest%20level.png

  • The current forest functional level will be displayed along with the available functional levels that you can use for your forest level .

    http://www.elmajdal.net/Win2k8/How_To_Raise_the_Forest_and_Domain_Functional_Levels_in_Windows_Server_2008_R2/current%20and%20available%20forest%20level%202.png

    Select the forest functional level and click on
     Raise

    http://www.elmajdal.net/Win2k8/How_To_Raise_the_Forest_and_Domain_Functional_Levels_in_Windows_Server_2008_R2/raiser-forest.png

    On the warning dialog box, confirm your choice by clicking on
     OK

    http://www.elmajdal.net/Win2k8/How_To_Raise_the_Forest_and_Domain_Functional_Levels_in_Windows_Server_2008_R2/confirm%20forest%20raise.png

    Note the following : After you set the forest functional level to a certain value, you cannot roll back or lower the forest functional level, with one exception: when you raise the forest functional level to Windows Server 2008 R2 and if Active Directory Recycle Bin is not enabled, you have the option of rolling the forest functional level back to Windows Server 2008. You can lower the forest functional level only from Windows Server 2008 R2 to Windows Server 2008, it cannot be rolled back to Windows Server 2003.

    http://www.elmajdal.net/Win2k8/How_To_Raise_the_Forest_and_Domain_Functional_Levels_in_Windows_Server_2008_R2/forest%20level%20raised.png

    The functional level raise will be successful, and the replication process will start between the Domain Controllers in the forest.

 

  • Raising the Function Level of the Domain:

  • Open Active Directory Domains and Trusts

  • Right click on the Domain name, in this example : elmajdal.com , and then click on Raise Domain Functional Level...

    http://www.elmajdal.net/Win2k8/How_To_Raise_the_Forest_and_Domain_Functional_Levels_in_Windows_Server_2008_R2/raise%20domain%20level.png

  • You will notice that you don't need to do anything here, as you already have raised the Forest Functional Level to the highest available level which is Windows Server 2008 R2.

You cannot set the domain functional level to a value that is lower than the forest functional level. For example, if you set the forest functional level to Windows Server 2008 R2, you can set the domain functional level only to Windows Server 2008 R2. The Windows 2000, Windows Server 2003, and Windows Server 2008 domain functional level values will not be available on the Set domain functional level wizard page. In addition, all domains that you subsequently add to that forest will have the Windows Server 2008 R2 domain functional level by default.

http://www.elmajdal.net/Win2k8/How_To_Raise_the_Forest_and_Domain_Functional_Levels_in_Windows_Server_2008_R2/Domain%20Raised.png

Note the following :
 You can lower the domain functional level only from Windows Server 2008 R2 to Windows Server 2008. If the domain functional level is set to Windows Server 2008 R2, it cannot be rolled back, for example, to Windows Server 2003.

 

Summary

When you create a new domain or a new forest, set the domain and forest functional levels to the highest values that you know your environment can support. This way, you can take advantage of as many AD DS features as possible

 

2​​ |​​ Page

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

When autocomplete results are available use up and down arrows to review and enter to go to the desired page. Touch device users, explore by touch or with swipe gestures.

Recent Posts

  • vROps: Management Pack Troubleshooting
  • Windows AD {Active Directory} (PowerShell) samples
  • Migrate VMs Between vCentres Using Powershell or PowerCLI
  • Set VM Tools to Update Automatically on VM Reboot using powershell
  • Windows Administrator Must Have Powershell Commands

Recent Comments

  • JB on Script: How to get VM with Tag Assignment and export results to csv using PowerCLI or Powershell
  • DL on How to change VCSA root password and bypass BAD PASSWORD: it is based on a dictionary word for vCenter VCSA root account warning
  • 360coolp on How to change VCSA root password and bypass BAD PASSWORD: it is based on a dictionary word for vCenter VCSA root account warning
  • Yogesh on ESXi 8.x, 7.x, 6.x Service sfcbd-watchdog Not Running / Fails to Start – VirtuallyThatGuy
  • VirtuallyThatGuy on ESXi 8.x, 7.x, 6.x Service sfcbd-watchdog Not Running / Fails to Start – VirtuallyThatGuy

Archives

  • March 2023
  • February 2023
  • January 2023
  • December 2022
  • November 2022
  • October 2022
  • September 2022
  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • April 2022
  • March 2022
  • February 2022
  • January 2022
  • December 2021
  • November 2021
  • October 2021
  • September 2021
  • August 2021
  • July 2021
  • June 2021
  • May 2021
  • April 2021
  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • May 2020
  • April 2020
  • March 2020
  • February 2020
  • January 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • May 2019
  • April 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • November 2018
  • October 2018
  • July 2018
  • June 2018
  • May 2018
  • April 2018
  • March 2018
  • February 2018
  • January 2018
  • December 2017

Categories

  • Automation
  • PowerCLI
  • VMware
  • Windows
© 2025 VirtuallyThatGuy | Powered by Superbs Personal Blog theme