MCITP 70-640: Active Directory Forest Functional Levels

Like domain functional levels the forest functional level determines which additional features in Active Directory will be available. In order to raise your forest functional level all domains in the forest must be at the corresponding forest level or higher. This video looks at the features that are available at each forest level and how to raise the forest level.

Raise forest functional demo 16:04

When looking at an existing network with multiple domains, these domains may have been put in place originally due to limitations in Active Directory. Previously Active Directory was not able to support more than one password policy per domain and even though quite high there were some limits to how many users could be put into certain groups. Given these limits may have meant that more domains were created then what would be required now days. When rasing your domain and forest functional level consider if any domains can be combined together. Doing so will reduce the complexity of your network and make it easier to support.

Forest Level
Listed below are all the different forest levels and the features that each forest level adds. Remember that to raise the functional level of your forest all domains in that forest must be at that forest level or higher. In other words, the level you can raise the forest level will be determined by the domain in the forest with the lowest domain functional level.

Windows 2000 native
Basic Active Directory features

Windows Server 2003
Forest Trust: Allows a trust relationship between two forests. A forest trust allows resources to be shared between the forests.
Rename Domains: This allows you to change a domain name.
Link Value Replication: This means that only changes to group membership are replicated. Without link value replication, if a group is changed in two locations at once, the record with the newest time stamp is used replacing all others records and thus all changes in those records are lost. Using link value replication also reduces the amount of data that is sent over the network during replication.
Improved Knowledge Consistency Checker (KCC): The KCC is responsible for creating replication links between sites. With this forest functional level the KCC improved particularly working with large deployments.
Dynamic Auxiliary Class: Allows Active Directory objects to be created and have an expire time added to the object.
Convert INetOrgPerson to user: Allows an INetOrgPerson object to be converted to a user object and reverse. The INetOrgPerson object is used when importing or exporting users from Active Directory to anther 3rd party directory system. Being able to convert a user object in Active Directory to an INetOrgPerson object makes the process of exporting and importing users with Active Directory a lot easier.
Window Server 2008 RODC: This forest level is required if you want to start using Windows Server 2008 Read Only Domain Controllers in Active Directory.
Deactivation of attributes: Once you make a change to the schema of Active Directory it can't be delete. Deactivation allows you to deactivate attributes in the Schema that are no longer required.

Window Server 2008
No new features are added to Active Directory with this forest functional level.

Window Server 2008 R2
Active Directory Recycle bin: Allows deleted objects in Active Directory to be resorted.

Rasing the Forest Function Level
To raise a forest functional level, run Active Directory Domains and Trusts from administrative tools from the start menu. Right click the root of the tree and select raise forest functional level. From the dialog box select the forest functional level that you want and press raise. Remember that the process can't be reversed once done and there may be a delay while replication occurs before the changes take effect.

See http://itfreetraining.com or http://youtube.com/ITFreeTraining for our always free training videos. This is only one video of the completely free course for the 70-640 exam available for free on you tube.

1. forest functional level, forest functional level 2003, forest functional level 2012, forest functional level 2019, forest functional level upgrade, forest functional level 2008, forest functional level comparison, forest functional level check, forest functional level trust relationships, forest functional level vs domain, forest functional level 2012 r2 requirements, forest functional level exchange 2016, forest functional level 2003 to 2008, forest functional level of the on-premises active directory, forest functional level powershell, forest functional level lower than domain, forest functional level 2003 to 2016, forest functional level compatibility matrix, forest functional level 2016 compatibility, forest functional level exchange 2010, forest functional level 2003, forest functional level 2008, forest functional level 2012, forest functional level 2019, forest functional level upgrade, forest functional level requirements, forest functional level 2008 r2, forest functional level comparison, forest functional level check, forest functional level trust relationships, forest functional level vs domain, forest functional level 2012 r2 requirements, forest functional level 2012 r2 features, forest functional level exchange 2016, forest functional level 2003 to 2008, forest functional level raise, forest functional level of the on-premises active directory, forest functional level powershell, forest functional level lower than domain, forest functional level 2003 to 2016, active directory users and computers, active directory windows 10, active directory domain services, active directory administrative center, active directory federation services, active directory tutorial, active directory tools, active directory ou, active directory ports, active directory recycle bin, active directory download, active directory certificate services, active directory password policy, active directory certification, active directory forest, active directory lightweight directory services, active directory powershell module, active directory ldap, active directory for dummies, active directory management tools, \u003d -570, 70-640 exam, 70-640 certification, 70-640 pdf, 70-640 study guide pdf, 70-640 exam questions pdf, 70-640 pdf ebook, mcitp systems administrator, mcitp vs mcse, mcitp-ea, mcitp enterprise administrator, mcitp server administrator, mcitp 70-640, mcitp salary, mcitp certification course, mcitp microsoft, mcitp practice test, mcitp jobs, mcitp windows 10, mcitp meaning, mcitp family support network, mcitp logo, mcitp replacement, mcitp certification cost, mcitp mcps, mcitp 2008, mcitp mcse mcts, mcts real time, mcts tracker, mctsib, mcts m card, mctssa, mcts route 15, mcts trip planner, mcts bus, mcts route 76, mcts route 27, mcts green line, mcts route 14, mcts route 30, mcts route 19, mcts gold line, mcts route 67, mcts route 23, mcts app, mcts next, mcts 80, itfreetraining youtube, itfreetraining active directory, itfreetraining adfs, itfreetraining dns, itfreetraining 70-410, itfreetraining windows server 2016, itfreetraining windows server 2012, itfreetraining vmware, itfreetraining 70-640, itfreetraining powershell, itfreetraining windows 7, itfreetraining windows 10, itfreetraining hyper v, itfreetraining group policy, itfreetraining groups, itfreetraining dfs, itfreetraining sccm, itfreetraining certificate, itfreetraining linux, itfreetraining 70-411

MCITP 70-640: Active Directory Forest Functional Levels
65,925 views views	followers
186 Likes	186 Dislikes
Education	Upload TimePublished on 7 Jan 2012