none
Forest Level

    Question

  • Last month we transitioned to AD 2008.  We still have our 2003 DCs but are planning on demoting them over the next 3 weeks or so.  Prior to transitioning to AD 2008 our forest and domain functional level was at server 2003, after the transition both were at server 2003 level.  Today I noticed that our domian is at server 2003 but the Forest functional level is now at windows 2000.  How could\ this be?  I thouth that once you went forward going back was not easy at all.  Could this be a result of a GPO?  We do have a group that handles GPOs and they are testing GPOs in server 2008. 

    Thursday, March 31, 2011 5:14 PM

Answers

  • Howdie!
     
    On 31.03.2011 19:14, dvua wrote:
    > Last month we transitioned to AD 2008. We still have our 2003 DCs but
    > are planning on demoting them over the next 3 weeks or so. Prior to
    > transitioning to AD 2008 our forest and domain functional level was at
    > server 2003, after the transition both were at server 2003 level. Today
    > I noticed that our domian is at server 2003 but the Forest functional
    > level is now at windows 2000. How could\ this be? I thouth that once you
    > went forward going back was not easy at all. Could this be a result of a
    > GPO? We do have a group that handles GPOs and they are testing GPOs in
    > server 2008.
     
    Where have you checked? Where do you see that functional level? You
    techically can't roll back the Domain or Forest Functional Level to a
    lower level (until Server 2008 R2). So once you are on 2003, you can't
    move back. So you probably have always been at Forest Level 2000. These
    two levels can be changed seperately.
     
    It can't be a GPO. GPOs don't change Forest or Domain Levels, they
    actually don't impact Active Directory at all -- besides that they store
    their configuration in there. Since you mention GPOs: when running
    gpresult from the command line, it falsely states that the level is
    "Windows 2000". This is a bug we never cared to fix. The text there is
    just wrong.
     
    So my guess is that you really are mistaken and the level has always
    been 2000.
     
    Cheers,
    Florian
     

    The views and opinions expressed in my postings do NOT correlate with the ones of my friends, family or my employer.
    • Proposed as answer by Mike Kline Thursday, March 31, 2011 6:54 PM
    • Marked as answer by Brent HuModerator Tuesday, April 05, 2011 5:38 AM
    Thursday, March 31, 2011 6:50 PM
  • Technical it is impossible that DFL/FFL getting reverted back automatically i mean w/o automation or scheduling.

    Could you check the event logs on DC under Directory services log, if there is such change you will see event logged.

    Domain Functional level can be windows 2003 with forest functioanl level of windows 2000, coz DFL depends on Higher version of OS where as FFL depends on DFL.

    Take a look on below article for windows 2008 R2.

    http://social.technet.microsoft.com/wiki/contents/articles/how-to-revert-back-or-lower-the-active-directory-forest-and-domain-functional-levels-in-windows-server-2008-r2.aspx?wa=wsignin1.0

     

    Regards  


    Awinish Vishwakarma| MY Blog  

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

     

    Friday, April 01, 2011 4:13 AM
    Moderator

All replies

  • Howdie!
     
    On 31.03.2011 19:14, dvua wrote:
    > Last month we transitioned to AD 2008. We still have our 2003 DCs but
    > are planning on demoting them over the next 3 weeks or so. Prior to
    > transitioning to AD 2008 our forest and domain functional level was at
    > server 2003, after the transition both were at server 2003 level. Today
    > I noticed that our domian is at server 2003 but the Forest functional
    > level is now at windows 2000. How could\ this be? I thouth that once you
    > went forward going back was not easy at all. Could this be a result of a
    > GPO? We do have a group that handles GPOs and they are testing GPOs in
    > server 2008.
     
    Where have you checked? Where do you see that functional level? You
    techically can't roll back the Domain or Forest Functional Level to a
    lower level (until Server 2008 R2). So once you are on 2003, you can't
    move back. So you probably have always been at Forest Level 2000. These
    two levels can be changed seperately.
     
    It can't be a GPO. GPOs don't change Forest or Domain Levels, they
    actually don't impact Active Directory at all -- besides that they store
    their configuration in there. Since you mention GPOs: when running
    gpresult from the command line, it falsely states that the level is
    "Windows 2000". This is a bug we never cared to fix. The text there is
    just wrong.
     
    So my guess is that you really are mistaken and the level has always
    been 2000.
     
    Cheers,
    Florian
     

    The views and opinions expressed in my postings do NOT correlate with the ones of my friends, family or my employer.
    • Proposed as answer by Mike Kline Thursday, March 31, 2011 6:54 PM
    • Marked as answer by Brent HuModerator Tuesday, April 05, 2011 5:38 AM
    Thursday, March 31, 2011 6:50 PM
  • Technical it is impossible that DFL/FFL getting reverted back automatically i mean w/o automation or scheduling.

    Could you check the event logs on DC under Directory services log, if there is such change you will see event logged.

    Domain Functional level can be windows 2003 with forest functioanl level of windows 2000, coz DFL depends on Higher version of OS where as FFL depends on DFL.

    Take a look on below article for windows 2008 R2.

    http://social.technet.microsoft.com/wiki/contents/articles/how-to-revert-back-or-lower-the-active-directory-forest-and-domain-functional-levels-in-windows-server-2008-r2.aspx?wa=wsignin1.0

     

    Regards  


    Awinish Vishwakarma| MY Blog  

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

     

    Friday, April 01, 2011 4:13 AM
    Moderator