Active Directory has functional levels at the domain and forest levels which determine which Active Directory features are available. The higher the functional level the more features available. This video looks at which domain functional levels are available and how to raise the domain functional level to get access to these features. The next video in this free series looks at the forest functional levels. Raising the domain function level demo 17:46 The different domain functional levels and the features you get from the functional level are listed below. Windows 2000 native * Gives basic Active Directory functionality Windows Server 2003 * Allows the computer name of a domain controller to be changed. * Adds last login time stamp to each user account * Adds UserPassword to iNetOrgPerson object. This is used when migrating from a 3rd party directory service. It allows the 3rd party password to be stored in Active Directory. * Constrained delegation. Delegation is when credentials are passed from one system to another; eg, an administrator connects to a computer and then attempts to have that computer connect to a file share on another computer using the administrator's credentials. Delegation is disabled by default in Active Directory. Windows Server 2003 domain functional level allows you to determine which services are delegated and which are not and to which computers. You could, for example, trust delegation only for file sharing to only a particular server. Before ...

• published: 06 Jan 2012
• views: 18979
• author: itfreetraining