locked
raise the functional level RRS feed

  • Question

  • Hi,

    We are looking to raise our domain and forest functional level from Windows 2008 R2 to Windows 2016 once the upgrade of our domain controllers is completed.

    What's the impact if we raise the functional level from Windows 2008 R2 to Windows 2016 ?

    Wednesday, March 18, 2020 2:57 AM

Answers

  • Hi,

    We are looking to raise our domain and forest functional level from Windows 2008 R2 to Windows 2016 once the upgrade of our domain controllers is completed.

    What's the impact if we raise the functional level from Windows 2008 R2 to Windows 2016 ?

    Hi,

    You can raise the functional level without any impact on client and members servers.


    Please don't forget to mark the correct answer, to help others who have the same issue. Thameur BOURBITA MCSE | MCSA My Blog : http://bourbitathameur.blogspot.fr/

    • Marked as answer by RichardT48 Wednesday, March 18, 2020 11:57 PM
    Wednesday, March 18, 2020 3:01 AM
  • For one, you get extra functionality described at https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/active-directory-functional-levels

    I'm not aware of any documented issues - in addition, keep in mind that you can downgrade the functional level - for details refer to https://secureinfra.blog/2019/10/23/downgrading-active-directory-domain-and-forest-functional-levels-part-1/

    hth
    Marcin

    • Marked as answer by RichardT48 Wednesday, March 18, 2020 11:57 PM
    Wednesday, March 18, 2020 3:01 AM
  • Hi,

    Thank you for posting in our TechNet forum.

    According to our description, we would like to know whether there is any impact if we raise the functional level from Windows 2008 R2 to Windows 2016. 

    Once the Functional Level has been upgraded, new DCs on running on downlevel versions of Windows Server cannot be added to the domain or forest. To prevent these issues from arising, a new DC must be at the same level, or greater, than the functional level of the domain or forest.

    The second restriction, for which there is a limited exception on Windows Server 2008 R2, is that once upgraded, the Domain or Forest Functional Level cannot later be downgraded. 

    The process of raising DFL/FFL is not a reversible operation without restore. Before proceeding further with the change, please review our AD environment. Make sure that our AD environment is healthy.

    We can set the domain functional level to a value that is equal to or higher than the forest functional level. Also, we will need to have DCs that are running OS with the same level as DFL or higher.

    For more information, please refer to:

    Understanding Active Directory Domain Services (AD DS) Functional Levels
    https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754918(v=ws.10)?redirectedfrom=MSDN

    What is the Impact of Upgrading the Domain or Forest Functional Level?
    https://docs.microsoft.com/en-us/archive/blogs/askds/what-is-the-impact-of-upgrading-the-domain-or-forest-functional-level

    Hope the information is helpful. Please let us know if we would like further assistance.


    Best regards,
    Hannah Xiong

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.



    Wednesday, March 18, 2020 7:07 AM

All replies

  • Hi,

    We are looking to raise our domain and forest functional level from Windows 2008 R2 to Windows 2016 once the upgrade of our domain controllers is completed.

    What's the impact if we raise the functional level from Windows 2008 R2 to Windows 2016 ?

    Hi,

    You can raise the functional level without any impact on client and members servers.


    Please don't forget to mark the correct answer, to help others who have the same issue. Thameur BOURBITA MCSE | MCSA My Blog : http://bourbitathameur.blogspot.fr/

    • Marked as answer by RichardT48 Wednesday, March 18, 2020 11:57 PM
    Wednesday, March 18, 2020 3:01 AM
  • For one, you get extra functionality described at https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/active-directory-functional-levels

    I'm not aware of any documented issues - in addition, keep in mind that you can downgrade the functional level - for details refer to https://secureinfra.blog/2019/10/23/downgrading-active-directory-domain-and-forest-functional-levels-part-1/

    hth
    Marcin

    • Marked as answer by RichardT48 Wednesday, March 18, 2020 11:57 PM
    Wednesday, March 18, 2020 3:01 AM
  • Hi,

    Thank you for posting in our TechNet forum.

    According to our description, we would like to know whether there is any impact if we raise the functional level from Windows 2008 R2 to Windows 2016. 

    Once the Functional Level has been upgraded, new DCs on running on downlevel versions of Windows Server cannot be added to the domain or forest. To prevent these issues from arising, a new DC must be at the same level, or greater, than the functional level of the domain or forest.

    The second restriction, for which there is a limited exception on Windows Server 2008 R2, is that once upgraded, the Domain or Forest Functional Level cannot later be downgraded. 

    The process of raising DFL/FFL is not a reversible operation without restore. Before proceeding further with the change, please review our AD environment. Make sure that our AD environment is healthy.

    We can set the domain functional level to a value that is equal to or higher than the forest functional level. Also, we will need to have DCs that are running OS with the same level as DFL or higher.

    For more information, please refer to:

    Understanding Active Directory Domain Services (AD DS) Functional Levels
    https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754918(v=ws.10)?redirectedfrom=MSDN

    What is the Impact of Upgrading the Domain or Forest Functional Level?
    https://docs.microsoft.com/en-us/archive/blogs/askds/what-is-the-impact-of-upgrading-the-domain-or-forest-functional-level

    Hope the information is helpful. Please let us know if we would like further assistance.


    Best regards,
    Hannah Xiong

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.



    Wednesday, March 18, 2020 7:07 AM
  • Thank you for your replies.

    Wednesday, March 18, 2020 11:57 PM
  • Hi,

    You are welcome. Thank you so much for your support.

    Best regards,
    Hannah Xiong

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, March 19, 2020 1:26 AM