Raising the Functional Levels: Difference between revisions

From SambaWiki
m (Fixed typos)
(Updated information about 2012 funtional levels)
Line 35: Line 35:
|}
|}


<nowiki>*</nowiki> Not supported. Kerberos improvements from Windows Server 2012 and 2012 R2 are not implemented in Samba.
<nowiki>*</nowiki> Functional level is included, but not supported. Kerberos improvements from Windows Server 2012 and 2012 R2 are not implemented in Samba.





Revision as of 17:43, 27 January 2017

Introduction

The Active Directory (AD) functional levels determine the domain or forest capabilities. For details, see:



Supported Functional Levels

You can set the following functional levels in a Samba Active Directory (AD):

Functional Level Included in Samba Version
2012_R2 4.4 and later*
2012 4.4 and later*
2008_R2 4.0 and later
2008 4.0 and later
2003 4.0 and later

* Functional level is included, but not supported. Kerberos improvements from Windows Server 2012 and 2012 R2 are not implemented in Samba.



Raising the Domain Functional Level

Using samba-tool

To raise the domain functional level on a Samba Active Directory (AD) domain controller (DC), use samba-tool. For example, to set the domain functional level to 2008_R2:

# samba-tool domain level raise --domain-level=2008_R2

For a list of supported domain functional levels, see Supported Functional Levels.


Using the Windows Active Directory Domains and Trusts Utility

Run the following steps on a Windows machine having the remote server administration tools (RSAT) installed:

  • Log in as domain administrator.
  • Open the Active Directory Domains and Trusts utility.
  • Right-click the domain on the left side and select Raise Domain Functional Level.
Raise Domain Functional Level.png
  • Select the functional level.
  • Click OK.



Raising the Forest Functional Level

Using samba-tool


Using samba-tool

To raise the forest functional level on a Samba Active Directory (AD) domain controller (DC), use samba-tool. For example, to set the forest functional level to 2012_R2:

# samba-tool domain level raise --forest-level=2008_R2

For a list of supported forest functional levels, see Supported Functional Levels.


Using the Windows Active Directory Domains and Trusts Utility

Run the following steps on a Windows machine having the remote server administration tools (RSAT) installed:

  • Log in as domain administrator.
  • Open the Active Directory Domains and Trusts utility.
  • Right-click Active Directory Domains and Trusts on the left side and select Raise Forest Functional Level.
Raise Forest Functional Level.png
  • Select the functional level.
  • Click OK.