Detailed description of the function level of Windows Server Forest

The setting of the forest function level in the Windows Server operating system determines the Active ad ds function in the domain or forest, and the version of Windows Server that can be used as the domain controller in the domain or forest.

With the increase of the Windows Server operating system version, its functions are gradually enriched and improved. Since Windows Server 2003, when configuring AD, you can select different forest function levels to meet different requirements. In Windows Server 2008, you can choose more forest function levels, which support Windows 2000, windows Server 2003 and Windows Server 2008. However, in Windows Server, all forest function levels are backward compatible, but not upwards compatible. That is, Windows Server 2003 supports Windows 2000 forest function levels, however, Windows 2000 does not support the forest function level of Windows Server 2003.

In the Configuration Wizard of Windows Server, although there is a description of the forest function level, it is not very detailed. This article will provide a detailed description of the forest function level in Windows Server:

Windows 2000

Available features:

All default ad ds functions are available

Windows Server 2003

Available features:

All default ad ds functions and the following functions:

• Lin Trust
• Domain rename
• Copy link value
• Deploy a read-only Domain Controller
• Improved Knowledge Consistency Checker (KCC) algorithms and scalability
• Improved ISTG Algorithm
• Create a dynamic helper class instance named dynamicObject in the domain directory partition.
• This section describes how to convert an inetOrgPerson object instance to a User object instance and convert the instance to the contrary.
• Create a new group type instance to support role-based authorization.
• Deactivating and redefinition of attributes and classes in the architecture

Windows Server 2008

Available features:

Supports all functions in the functional level of Windows Server 2003 forest, but no other functions are available. However, you can operate on all the domains that will be added to the forest at the Windows Server 2008 domain functional level.

Address: http://marui.blog.51cto.com/1034148/492583