Functional Levels

There are two types of functional levels:

1. Domain functional level
2. Forest functional level

DFL: Windows 2000 Native
-----------------------------------------------------------------------
* No mixed or native
* DC: W2k, W2k3, W2k8
* Basic AD services

DFL: Windows Server 2003
----------------------------------------------------------------------
* DC: W2k3, W2k8
* DC rename possible : To change the computer name using command line, use the netdom command as follows:

netdom computername %computername% /add:newcompname.domain.com

netdom computername %computername% /makeprimary:newcompname.domain.com

To restart the computer,

shutdown /r /t 0
/r- restart
/t- time after which to restart

To remove the old computer name,

netdom computername %computername% /remove:oldcompname.domain.com


* Attributes :
- Last logon time stamp- Check the saved queries folder in Active directory to find out last logon information.
- User password

* Rediruser, Redircmp
* Selective Authentication
* Constrained Delegation
* Authorization Manager

DFL: Windows Server 2008
-------------------------------------
- DFL W2K3 + .....
- DC : W2k8
- DFS R SysVol Replication
- Last Logon
- Fine Grained Passwords

To raise the functional level,
1. Go to dsa.msc and right click on the domain and click on raise domain functional level

FFL: Windows 2000
---------------------------
DFL: W2k Native, Win2k3, Win2k8

FFL: Windows 2003
---------------------------
Forest Trust
Domain rename
Linked Value Replication: Just replicates new objects instead of entire group
RODC
Improved KCC algorithms
and with FFL Windows 2008, you get the same features as in FFL windows 2003.

To raise FFL: Go to Active directory domains and trusts and right click on forest level and choose Raise forest functional level.