locked
Raising forest functional level from Windows 2000 to Windows 2003 RRS feed

  • Question

  • Hi....

    I am running Win 2003 AD but the domain and forest functional level are still Windows 2000.

    We still have 5 member servers running Windows 2000 Server OS and about 20 workstations running Win 2000 Pro.

    If I raise my domain & forest functional level to 2003, will my Win 2000 servers and workstation still able to login to my AD?

    Thanks....

    Friday, February 24, 2012 2:12 AM

Answers

  • Hi,

    All your Windows 2000 member servers and workstations will work normally after raising your domain and forest functional level to 2003. Domain and forest functional level are based on the operating systems installed on your domain controllers.

    For more information, please refer to the following Microsoft TechNet articles:

    Understanding Active Directory Domain Services (AD DS) Functional Levels
    http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels(v=WS.10).aspx

    What Are Active Directory Functional Levels?
    http://technet.microsoft.com/en-us/library/cc787290(v=WS.10).aspx

    Regards,


    Arthur Li

    TechNet Community Support

    Friday, February 24, 2012 3:01 AM
  • as your having all domain controllers with windows 2003, you can raise the forest functional leval.Anyof the client wont get any effect from that.

    Darshana Jayathilake

    Friday, February 24, 2012 5:54 AM
  • Forest/Domain Functional Level's are raised to get an advace features in your Active directory enviorment.

    Below is the link you can refer to get the infomration of all the forest and domain functional level and features they will provide.

    http://www.petri.co.il/understanding-windows-server-2008-active-directory-domain-and-forest-functional-levels.htm

    http://support.microsoft.com/kb/322692

    As suggested by others it will not impact the authentication purpose. So you can raise the Forest Functional level.

    Note - Once the Forest functional/Domain Functional has been rasied to windows server 2003 then you can not Rollback to windows server 2000.

    Regards,

    _Prashant_


    MCSA|MCITP SA|Microsoft Exchange 2003 Blog - http://prashant1987.wordpress.com

    Friday, February 24, 2012 7:11 AM
  • Hi,

    Agree with others, Raising functional levels is very simple process only 2 or 3 clicks. Functional levels determine the available Active Directory Domain Services (AD DS) domain or forest capabilities. They also determine which Windows Server operating systems you can run on domain controllers in the domain or forest. However, functional levels do not affect which operating systems you can run on workstations and member servers that are joined to the domain and on Trust Relationship.

    Raising functional levels increase AD DS capabilities and it provides better and more features for applications.

    What is the Impact of Upgrading the Domain or Forest Functional Level?
    http://blogs.technet.com/b/askds/archive/2011/06/14/what-is-the-impact-of-upgrading-the-domain-or-forest-functional-level.aspx


    Best Regards,

    Abhijit Waikar.
    MCSA 2003 | MCSA:Messaging | MCTS | MCITP:Server Administrator | Microsoft Community Contributor | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Friday, February 24, 2012 8:10 AM
  • Hello,

    there is non problem raising the functional levels as these only depend on the used DC OS version not from member servers.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Friday, February 24, 2012 8:39 AM
  • I guess you have raise the DFL/FFL long back as there are considerable benefits with windows 2003 comparing to windows 2000. There is no issues at least raising the DFL/FFL from windows 2000 to 2003.

    At this point of time, i would plan to upgrade DC's to windows 2008 R2 and enjoy the benefits offered with windows 2008 R2 like AD recycle bin, SPN management etc.

    http://technet.microsoft.com/en-us/library/cc757019%28v=ws.10%29.aspx

     

     

    Regards

    Awinish Vishwakarma

    MY BLOG:  awinish.wordpress.com


    This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    Friday, February 24, 2012 9:27 AM
  • Considering that all of your domain controllers are already running Windows Server 2003, raising domain/forest functional levels should have no negative implications - and would not prevent your domain member computers from authenticating

    hth
    Marcin

    Friday, February 24, 2012 12:48 PM

All replies

  • Hi,

    All your Windows 2000 member servers and workstations will work normally after raising your domain and forest functional level to 2003. Domain and forest functional level are based on the operating systems installed on your domain controllers.

    For more information, please refer to the following Microsoft TechNet articles:

    Understanding Active Directory Domain Services (AD DS) Functional Levels
    http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels(v=WS.10).aspx

    What Are Active Directory Functional Levels?
    http://technet.microsoft.com/en-us/library/cc787290(v=WS.10).aspx

    Regards,


    Arthur Li

    TechNet Community Support

    Friday, February 24, 2012 3:01 AM
  • as your having all domain controllers with windows 2003, you can raise the forest functional leval.Anyof the client wont get any effect from that.

    Darshana Jayathilake

    Friday, February 24, 2012 5:54 AM
  • Forest/Domain Functional Level's are raised to get an advace features in your Active directory enviorment.

    Below is the link you can refer to get the infomration of all the forest and domain functional level and features they will provide.

    http://www.petri.co.il/understanding-windows-server-2008-active-directory-domain-and-forest-functional-levels.htm

    http://support.microsoft.com/kb/322692

    As suggested by others it will not impact the authentication purpose. So you can raise the Forest Functional level.

    Note - Once the Forest functional/Domain Functional has been rasied to windows server 2003 then you can not Rollback to windows server 2000.

    Regards,

    _Prashant_


    MCSA|MCITP SA|Microsoft Exchange 2003 Blog - http://prashant1987.wordpress.com

    Friday, February 24, 2012 7:11 AM
  • Hi,

    Agree with others, Raising functional levels is very simple process only 2 or 3 clicks. Functional levels determine the available Active Directory Domain Services (AD DS) domain or forest capabilities. They also determine which Windows Server operating systems you can run on domain controllers in the domain or forest. However, functional levels do not affect which operating systems you can run on workstations and member servers that are joined to the domain and on Trust Relationship.

    Raising functional levels increase AD DS capabilities and it provides better and more features for applications.

    What is the Impact of Upgrading the Domain or Forest Functional Level?
    http://blogs.technet.com/b/askds/archive/2011/06/14/what-is-the-impact-of-upgrading-the-domain-or-forest-functional-level.aspx


    Best Regards,

    Abhijit Waikar.
    MCSA 2003 | MCSA:Messaging | MCTS | MCITP:Server Administrator | Microsoft Community Contributor | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Friday, February 24, 2012 8:10 AM
  • Hello,

    there is non problem raising the functional levels as these only depend on the used DC OS version not from member servers.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Friday, February 24, 2012 8:39 AM
  • I guess you have raise the DFL/FFL long back as there are considerable benefits with windows 2003 comparing to windows 2000. There is no issues at least raising the DFL/FFL from windows 2000 to 2003.

    At this point of time, i would plan to upgrade DC's to windows 2008 R2 and enjoy the benefits offered with windows 2008 R2 like AD recycle bin, SPN management etc.

    http://technet.microsoft.com/en-us/library/cc757019%28v=ws.10%29.aspx

     

     

    Regards

    Awinish Vishwakarma

    MY BLOG:  awinish.wordpress.com


    This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    Friday, February 24, 2012 9:27 AM
  • Considering that all of your domain controllers are already running Windows Server 2003, raising domain/forest functional levels should have no negative implications - and would not prevent your domain member computers from authenticating

    hth
    Marcin

    Friday, February 24, 2012 12:48 PM