AD Schema Version Support: Difference between revisions
From SambaWiki
(→Samba AD Schema Version Support: 4.19+ have 2019 schema level) |
(→Samba AD Schema Version Support: let's not invite bugzilla bugs for 4.5 to 4.10) |
||
| Line 59: | Line 59: | ||
|} |
|} |
||
<nowiki>*</nowiki> Experimental support |
<nowiki>*</nowiki> Experimental support. |
||
= Live Upgrade = |
= Live Upgrade = |
||
Latest revision as of 03:54, 26 September 2024
AD Schema Versions
The official Active Directory (AD) schema versions are:
| Windows Server Version | Directory Schema Version |
|---|---|
| Windows Server 2022 | 88 |
| Windows Server 2019 | 88 |
| Windows Server 2016 | 87 |
| Windows Server 2012R2 | 69 |
| Windows Server 2012 | 56 |
| Windows Server 2008R2 | 47 |
| Windows Server 2008 | 44 |
| Windows Server 2003R2 | 31 |
| Windows Server 2003 | 30 |
| Windows 2000 | 13 |
Samba AD Schema Version Support
Samba supports the following Active Directory schema versions:
| Samba Version | Highest Supported Schema Version |
|---|---|
| 4.19 and later | 88 |
| 4.11 - 4.18 | 69 |
| 4.5 - 4.10 | 69 * |
| 4.0 - 4.4 | 47 |
* Experimental support.
Live Upgrade
To upgrade the schema version on a running Samba installation to 2012_R2, use this command:
> samba-tool domain schemaupgrade
Note: This tool only works from 2008 R2. In order to upgrade from earlier versions, the ldf files must be manually sourced from the Windows adprep tool and run with the --ldf-file= option.
Determine the AD Schema Version on a Samba DC
To determine the Active Directory (AD) schema version on a Samba domain controller (DC):
Replace "dc=samdom,dc=example,dc=com" with your own domain
# ldbsearch -H /usr/local/samba/private/sam.ldb -b 'cn=Schema,cn=Configuration,dc=samdom,dc=example,dc=com' -s base objectVersion # record 1 dn: CN=Schema,CN=Configuration,DC=samdom,DC=example,DC=com objectVersion: 47 # returned 1 records # 1 entries # 0 referrals
Determine the AD Schema Version on a Windows Client or Server
dsquery
To determine the Active Directory (AD) schema version from the Windows command line:
> dsquery * "cn=Schema,cn=Configuration,dc=samdom,dc=example,dc=com" -scope base -attr objectversion objectversion 47
PowerShell
To determine the Active Directory (AD) schema version from the Windows PowerShell:
> Get-ADObject (Get-ADRootDSE).schemaNamingContext -properties objectVersion DistinguishedName : CN=Schema,CN=Configuration,DC=contoso,DC=com Name : Schema ObjectClass : dMD ObjectGUID : 92801cf6-f22d-4b7f-ba70-00af98790881 objectversion : 47