Re: ADMT access denied

From: Bob Qin [MSFT] (bobqin_at_online.microsoft.com)
Date: 02/10/04 

Date: Tue, 10 Feb 2004 18:36:26 GMT

Hi Tomppa,

More information: The four domain functional levels, their corresponding
features, and supported domain controllers are as follows:

Windows 2000 mixed (Default)
Supported domain controllers: Microsoft Windows NT 4.0, Windows 2000,
Windows Server 2003
Activated features: local and global groups, global catalog support

Windows 2000 native
Supported domain controllers: Windows 2000, Windows Server 2003
Activated features: group nesting, universal groups, SidHistory, converting
groups between security groups and distribution groups, you can raise
domain levels by increasing the forest level settings

Windows Server 2003 interim
Supported domain controllers: Windows NT 4.0, Windows Server 2003
Supported features: There are no domain-wide features activated at this
level. All domains in a forest are automatically raised to this level when
the forest level increases to interim. This mode is only used when you
upgrade domain controllers in Windows NT 4.0 domains to Windows Server 2003
domain controllers.

Windows Server 2003
Supported domain controllers: Windows Server 2003
Supported features: domain controller rename, logon timestamp attribute
updated and replicated. User password support on the InetOrgPerson
objectClass. Constrained delegation, you can redirect the Users and
Computers containers.

Regards,
Bob Qin
Product Support Services
Microsoft Corporation

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • RE: Domain Modes question
    ... When you use high level domain mode in Windows 2003 AD, ... features, and supported domain controllers are as follows: ... Supported domain controllers: Microsoft Windows NT 4.0, Windows 2000, ... Windows Server 2003 ...
    (microsoft.public.windows.server.migration)
  • RE: Have to use AD?
    ... Windows Server 2003 has four domain ... - Supported domain controllers: Microsoft Windows NT 4.0, Windows 2000, ... - Activated features: local and global groups, ...
    (microsoft.public.windows.server.migration)
  • Re: 3rd Party Firewalls on Domain Controllers.
    ... > W2K3 sp1 and while I think its great MS is now including a firewall ... > Windows 2000 server Domain Controllers right now, ... > - What firewall features are important with reguard to firewall ...
    (microsoft.public.win2000.active_directory)
  • Re: Domain Local group and Require strong. GPO Problem
    ... Microsoft MVP (Windows Server System: ... >> controller that is not capable of encrypting secure channel traffic with ... >> that all such domain controllers must be running Windows 2000 or later ... >> Session keys used to establish secure channel communications between ...
    (microsoft.public.win2000.security)
  • Re: Group Policy broke my DCs
    ... to be very careful with tweaking services on domain controllers. ... Group Policy - security policy at the OU level which makes it much easier to ... complied from the Windows 2003 Server Security guide for baseline core ... Server - automatic ...
    (microsoft.public.windows.group_policy)