Windows 2000 Active Directory domains can run in one of two modes: mixed and native. Mixed mode provides support for Windows NT backup domain controllers (BDCs) while preventing the use of certain NT-incompatible Active Directory features, such as universal security groups. Windows Server 2003 takes the concept of modes a step further, and it renames them functional levels . Similar to Windows 2000 Active Directory modes, functional levels enable Active Directory to remain compatible with older versions of Windows while preventing the use of certain features that would compromise backward-compatibility. Every Windows Server 2003 Active Directory domain starts in the Windows 2000 mixed functional level, which is identical in functionality to the Windows 2000 mixed mode. Domain functional levels include
Because Windows Server 2003 also introduces new forest-wide functionality to Active Directory, forests have their own functional levels, as follows :
Various features and functionality are available only in the higher-end functional levels. All the features that are available only to Windows 2000 domains running in native mode are available only if a Windows Server 2003 domain is in the Windows 2000 native functional level or a higher functional level. Of the new Windows Server 2003 features discussed in this chapter, the following have functional level restrictions:
Assuming your domain meets the requirements for upgrading, you can raise its functional level. However, Windows Server 2003 doesn't allow you to raise the functional level of any domain that contains domain controllers that would be incompatible with the new level. To raise the domain functional level, open Active Directory Domains and Trusts. Then, right-click the domain and select Raise Functional Level from the pop-up menu. You'll see the dialog box shown in Figure 5.1, which enables you to select a new functional level. Figure 5.1. This dialog box shows the current functional level and allows you to select a new one.
You can also use Active Directory domains and trusts to raise the forest's functional level. Notice in Figure 5.2 that Windows Server 2003 won't allow you to raise the forest functional level if all the domains in the forest aren't at the proper functional levels themselves . This prevents you from raising the forest to a functional level that would be incompatible with one or more domains. Figure 5.2. This dialog box displays a warning, rather than allowing you to raise the forest functional level.
Throughout the rest of this chapter, we'll call your attention to features that require a Windows Server 2003 domain or forest functional level.
|