Re: Win2008 Forest Functional level and trusts with Windows 2000 m

Is the same true with a pure Windows 2000 domain that currently has a two-way
trust with a Windows 2003 native functional level? The latter is about to be
upgraded to 2008 and I want to raise it to 2008 native when done, but the
trust must be maintained with the external 2000 domain.

Thanks,
Mindy

"John Policelli [MVP-DS]" wrote:

DFL and FFL strictly enabled advanced AD features (such as fine-grained
password policies) and limit which OS new DCs can have. In short, raising to
WS08 should have no impact.

Here are some links you can use to get more information:
http://technet.microsoft.com/en-us/library/cc816942.aspx
http://technet.microsoft.com/en-us/library/cc816837.aspx
http://technet.microsoft.com/en-us/library/cc770842.aspx

Hope this helps.
--

John Policelli,

This posting is provided "AS IS" with no warranties and confers no rights!

http://johnpolicelli.wordpress.com/

"Michelle Jay" <mic_jay98_nsp@xxxxxxxxx> wrote in message
news:udS4rfoOJHA.4576@xxxxxxxxxxxxxxxxxxxxxxx
Hi all,
Eventually I guess I will come about to test this out in my lab but I
thought I might do a quick ping if anyone has done this and can comment:

My setup comprises 2 forests:
Forest (A) is Windows 2008 based currently in Windows *2003* functional
level

Forest (B) is on Windows 2000 servers and in mixed mode but schema
extended to support a Windows 2003 DC

Two way trusts between domains in Forests A to domains in Forest B. Cannot
do forest level trust given the old functional mode. This was for IIFP,
InterOrg public folder replications and move-mailbox exercises between the
two forests.

The question is:...
If I go ahead and raise my Forest (A) to complete "Windows Server 2008"
forest functional level will this highest level break anything in the
domain trusts and IIFP, InterOrg rep (public folder pull and free/busy)
and move-mailboxes? So far in the above setup, all these inter-forest
exercises work.

I want to raise to full Win2008 functional level to leverage on granular
domain account policies capabilities in Win2008 ADDS.

Many thanks and cheers! :-)



.

Relevant Pages

  • Re: Raise "Forest" functional level & rename domain?
    ... When two forests are both at 2003 forest functional level you have two trust ... Cross-forest trusts have some benefits over standard domain trusts (e.g ... selective authentication, transitive across all domains in the forest, etc.). ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Functional Levels and Trusts
    ... other type of trust, i.e., Forest Trust ... A Forest Trust and an External trust are TWO DISTINCT types ... FORESTS to be in Win2003 Forest Functional Level. ... External trusts are possible in any MODE, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Raising the Domain and Forest Mode
    ... See also this article because of different security settings between NT4 and 2003 trust. ... domain (Windows Server 2003 Domain Mode) and a Windows NT domain, ... What you can think about is using forest trust's instead of two-way. ... The functional levels of the domain/forest are ...
    (microsoft.public.windows.server.active_directory)
  • Re: Raise "Forest" functional level & rename domain?
    ... when you say it will need to be a cross forest trust when both are at 2003, ... the domain we'd like to rename and leave the other one @ 2K level? ... > functional level of the domain/forest with which you have a trust. ...
    (microsoft.public.windows.server.active_directory)
  • 2003 Forest and Domain Functional Level
    ... out which functional level to set the forest and resource domain to. ... I would like to set our forest and domain functional level to Windows Server ...
    (microsoft.public.windows.server.active_directory)
Loading