none
LAPS on 2012 functional level RRS feed

  • Question

  • Hi All , 

    I'm required to implement LAPS on a domain controller that is on 2012 functional level , in a few months it will be raised to 2016 Functional level . 

    What will happen to the schema when it get raised from 2012 to 2016 ? should i extend it again when raised to 2016 ?

    Thanks 

    Immer

    Friday, September 20, 2019 11:16 PM

Answers

  • Hello,
    Thank you for posting in our TechNet forum.

    From the case with marked answer, we can see:
    What is the difference between a Schema Update and Functional Level Update?

    schema updates are always added to the existing schema versions. So they are NOT replacing existing ones, instead the new objects/attributes required for the new server OS versions are added.

    The schema ensures that all objects conform to their standard definitions. As a result, Active Directory can store, retrieve, and validate the data that it manages, regardless of the application that is the original source of the data. Only data that has an existing object definition in the schema can be stored in the directory. If a new type of data needs to be stored, a new object definition for the data must first be created in the schema.


    So because we have alreayd extended the schema on a domain controller that is on 2012 functional level, we do not need to extend it again on a domain controller that is on 2016 functional level.



    References:
    What is a schema update?

    Understanding Active Directory Domain Services (AD DS) Functional Levels




    Best Regards,
    Daisy Zhou

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, September 23, 2019 2:44 AM
    Moderator

All replies

  • As part of domain controller promotion the schema is automatically updated so the domain can accept the new domain controller operating system. Raising the domain functional level is a separate optional step.

    https://docs.microsoft.com/en-us/windows/win32/ad/active-directory-schema

    https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/active-directory-functional-levels

     

    (please don't forget to mark helpful replies as answer)

     

     



    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.





    Friday, September 20, 2019 11:36 PM
  • Hello,
    Thank you for posting in our TechNet forum.

    From the case with marked answer, we can see:
    What is the difference between a Schema Update and Functional Level Update?

    schema updates are always added to the existing schema versions. So they are NOT replacing existing ones, instead the new objects/attributes required for the new server OS versions are added.

    The schema ensures that all objects conform to their standard definitions. As a result, Active Directory can store, retrieve, and validate the data that it manages, regardless of the application that is the original source of the data. Only data that has an existing object definition in the schema can be stored in the directory. If a new type of data needs to be stored, a new object definition for the data must first be created in the schema.


    So because we have alreayd extended the schema on a domain controller that is on 2012 functional level, we do not need to extend it again on a domain controller that is on 2016 functional level.



    References:
    What is a schema update?

    Understanding Active Directory Domain Services (AD DS) Functional Levels




    Best Regards,
    Daisy Zhou

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, September 23, 2019 2:44 AM
    Moderator
  • Hi,
    Thank you for your update and marking my reply as answer. I’m very glad that the information is helpful.
     
    As always, if there is any question in future, we warmly welcome you to post in this forum again. We are happy to assist you! 

     
    Best Regards,
    Daisy Zhou

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, September 24, 2019 7:44 AM
    Moderator