Raising the Functional Levels: Difference between revisions

From SambaWiki
(Rewrote page. Clearer structure, added highlighting and admonition boxes, added supported AD functional levels in Samba versions)
mNo edit summary
 
(7 intermediate revisions by 4 users not shown)
Line 6: Line 6:


* [http://blogs.technet.com/b/askds/archive/2011/06/14/what-is-the-impact-of-upgrading-the-domain-or-forest-functional-level.aspx What is the Impact of Upgrading the Domain or Forest Functional Level?]
* [http://blogs.technet.com/b/askds/archive/2011/06/14/what-is-the-impact-of-upgrading-the-domain-or-forest-functional-level.aspx What is the Impact of Upgrading the Domain or Forest Functional Level?]


{{Imbox
| type = important
| text = If you raise any of the functional levels, you will need to restart the Samba AD DC(s).
}}




Line 13: Line 19:
= Supported Functional Levels =
= Supported Functional Levels =


Samba supports the following functional levels:
You can set the following functional levels in Active Directory (AD) via samba-tool.


{| class="wikitable"
{| class="wikitable"
!Functional Level
!Functional Level
!Supported in Samba Version
!Included in Samba Version
|-
|-
|2012_R2
|2012_R2
|4.4 and later
|4.4 and later*
|-
|-
|2012
|2012
|4.4 and later
|4.4 and later*
|-
|-
|2008_R2
|2008_R2
Line 35: Line 41:
|}
|}


<nowiki>*</nowiki> Functional level is included for use against Windows, but '''not supported in Samba'''. Kerberos improvements from Windows Server 2012 and 2012 R2 are not implemented in Samba.





= Raising the Domain Functional Level =
= Raising the Domain Functional Level =
Line 55: Line 59:
{{Imbox
{{Imbox
| type = important
| type = important
| text = Rasing the domain functional level using the <code>Active Directory Domains and Trusts</code> utility is currently not supported.<br />For details, see https://bugzilla.samba.org/show_bug.cgi?id=10360
| text = Raising the domain functional level using the <code>Active Directory Domains and Trusts</code> utility is currently not supported.<br />For details, see https://bugzilla.samba.org/show_bug.cgi?id=10360
}}
}}


Line 85: Line 89:
}}
}}




== Using samba-tool ==


To raise the forest functional level on a Samba Active Directory (AD) domain controller (DC), use <code>samba-tool</code>. For example, to set the forest functional level to <code>2012_R2</code>:
To raise the forest functional level on a Samba Active Directory (AD) domain controller (DC), use <code>samba-tool</code>. For example, to set the forest functional level to <code>2012_R2</code>:


# samba-tool domain level raise --forest-level=2008_R2
# samba-tool domain level raise --forest-level=2012_R2


For a list of supported forest functional levels, see [[#Supported_Functional_Levels|Supported Functional Levels]].
For a list of supported forest functional levels, see [[#Supported_Functional_Levels|Supported Functional Levels]].
Line 101: Line 102:
{{Imbox
{{Imbox
| type = important
| type = important
| text = Rasing the domain functional level using the <code>Active Directory Domains and Trusts</code> utility is currently not supported.<br />For details, see https://bugzilla.samba.org/show_bug.cgi?id=10360
| text = Raising the domain functional level using the <code>Active Directory Domains and Trusts</code> utility is currently not supported.<br />For details, see https://bugzilla.samba.org/show_bug.cgi?id=10360
}}
}}


Line 117: Line 118:


* Click <code>OK</code>.
* Click <code>OK</code>.





----
[[Category:Active Directory]]

Latest revision as of 16:47, 12 April 2021

Introduction

The Active Directory (AD) functional levels determine the domain or forest capabilities. For details, see:




Supported Functional Levels

You can set the following functional levels in Active Directory (AD) via samba-tool.

Functional Level Included in Samba Version
2012_R2 4.4 and later*
2012 4.4 and later*
2008_R2 4.0 and later
2008 4.0 and later
2003 4.0 and later

* Functional level is included for use against Windows, but not supported in Samba. Kerberos improvements from Windows Server 2012 and 2012 R2 are not implemented in Samba.

Raising the Domain Functional Level

Using samba-tool

To raise the domain functional level on a Samba Active Directory (AD) domain controller (DC), use samba-tool. For example, to set the domain functional level to 2008_R2: 

# samba-tool domain level raise --domain-level=2008_R2

For a list of supported domain functional levels, see Supported Functional Levels.


Using the Windows Active Directory Domains and Trusts Utility

Run the following steps on a Windows machine having the remote server administration tools (RSAT) installed:

  • Log in as domain administrator.
  • Open the Active Directory Domains and Trusts utility.
  • Right-click the domain on the left side and select Raise Domain Functional Level.
Raise Domain Functional Level.png
  • Select the functional level.
  • Click OK.



Raising the Forest Functional Level

Using samba-tool


To raise the forest functional level on a Samba Active Directory (AD) domain controller (DC), use samba-tool. For example, to set the forest functional level to 2012_R2: 

# samba-tool domain level raise --forest-level=2012_R2

For a list of supported forest functional levels, see Supported Functional Levels.


Using the Windows Active Directory Domains and Trusts Utility

Run the following steps on a Windows machine having the remote server administration tools (RSAT) installed:

  • Log in as domain administrator.
  • Open the Active Directory Domains and Trusts utility.
  • Right-click Active Directory Domains and Trusts on the left side and select Raise Forest Functional Level.
Raise Forest Functional Level.png
  • Select the functional level.
  • Click OK.



Retrieved from "https://wiki.samba.org/index.php?title=Raising_the_Functional_Levels&oldid=17432"