AD domain and forest functional levels
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/windowsserverdocs · commit 2e4f8a1 · +21 −24 lines · also on GitHub
⋯ 7 unchanged lines
88
---
99
# Raise domain and forest functional levels in Active Directory Domain Services
1010
11
−Functional levels determine the available Active Directory Domain Services (AD DS) domain or forest capabilities. Functional levels also determine which Windows Server operating systems you can run on domain controllers in the domain or forest. Level changes happen when you use later versions of your domain controller operating system, the domain, or your forest functional level. This article describes how to raise Active Directory domain and forest functional levels. We recommend you upgrade Active Directory Domain Service servers to the latest release.
11
+Functional levels determine the available Active Directory Domain Services (AD DS) domain or forest capabilities. Functional levels also determine which Windows Server operating systems you can run on domain controllers in the domain or forest. Level changes happen when you use later versions of your domain controller operating system, the domain, or your forest functional level. This article describes how to raise Active Directory domain and forest functional levels. We recommend that you upgrade Active Directory Domain Service servers to the latest release.
1212
1313
To enable the latest domain features, all domain controllers in the domain must run the version of Windows Server that matches or is newer than the desired functional level. If they don't meet this requirement, the administrator can't raise the domain functional level.
1414
1515
To enable the latest forest-wide features, all domain controllers in the forest must run the Windows Server operating system version that matches or is newer than the desired functional level. The current domain functional level must already be at the latest level. If the forest meets these requirements, the administrator can raise the forest functional level.
1616
17
−The domain and forest functional levels only affect how the domain controllers operate together as a group. The clients that interact with the domain or with the forest are unaffected by the changes. Applications are also unaffected by these changes. However, applications can use new features found in later versions of Windows Server once the administrator raises the domain level. For more information about the functional levels, see [Active Directory Domain Services functional levels](/windows-server/identity/ad-ds/active-directory-functional-levels).
17
+The domain and forest functional levels only affect how the domain controllers operate together as a group. The clients that interact with the domain or with the forest are unaffected by the changes. Applications are also unaffected by these changes. However, applications can use new features found in later versions of Windows Server after the administrator raises the domain level. For more information about the functional levels, see [Active Directory Domain Services functional levels](/windows-server/identity/ad-ds/active-directory-functional-levels).
1818
1919
> [!WARNING]
20
−> Changes to the domain and forest functional levels are irreversible. In order to undo the change, you must perform a forest recovery to revert to an earlier point in time.
20
+> Changes to the domain and forest functional levels are irreversible. To undo the change, you must perform a forest recovery to revert to an earlier point in time.
2121
2222
## Prerequisites
2323
24
−You need to complete the following things to raise the domain functional level:
24
+You need to meet the following prerequisites to raise the domain functional level:
2525
2626
- All domain controllers in the domain are running at least the version of Windows Server that you want to raise the domain functional level to. For example, to raise the domain functional level to Windows Server 2025, all domain controllers in the domain must be running Windows Server 2025. If you have domain controllers running earlier versions of Windows Server, you must upgrade them to Windows Server 2025 before you can raise the domain functional level.
2727
⋯ 1 unchanged line
2929
3030
- Your Active Directory forest and domain is operational and free from replication errors. To learn more about replication errors, see [Diagnose Active Directory replication failures](/troubleshoot/windows-server/active-directory/diagnose-replication-failures).
3131
32
−- Identify all your DCs hosting the Global Catalog (GC) and FSMO roles. Create and verify backups of these domain controllers before making changes.
32
+- Identify all your DCs hosting the Global Catalog and FSMO roles. Create and verify backups of these domain controllers before making changes.
3333
3434
- You must be a member of the Enterprise Admins group or equivalent to raise the forest functional level.
3535
36
−- You must have a computer with either of the following Remote Server Administration Tools (RSAT) installed:
36
+- You must have a computer with one of the following Remote Server Administration Tools (RSAT) installed:
3737
3838
- AD DS Tools.
39
−
40
− OR
41
−
4239
- Active Directory module for Windows PowerShell.
4340
4441
## View the current functional level
4542
46
−To view the current domain and forest functional levels, you can use the Active Directory Domains and Trusts console or Windows PowerShell. The following sections describe how to raise the functional levels using these methods.
43
+To view the current domain and forest functional levels, you can use the Active Directory Domains and Trusts console or Windows PowerShell. The following sections describe how to view the functional levels by using these methods.
4744
4845
> [!NOTE]
4946
> Windows Server 2019 and Windows Server 2022 use Windows Server 2016 as the most recent functional levels.
5047
5148
### [Desktop](#tab/desktop)
5249
53
−To raise the domain or forest functional level using the Active Directory Domains and Trusts console, follow these steps.
50
+To view the domain or forest functional level by using the Active Directory Domains and Trusts console, complete these steps.
5451
5552
1. Sign in to a computer with the AD DS Remote Server Administration Tools (RSAT) installed.
5653
57
−1. Select the Start menu, then enter _Active Directory Domains and Trusts_ in the search box.
54
+1. Select the Start menu and enter _Active Directory Domains and Trusts_ in the search box.
5855
59
−1. Open the **Active Directory Domains and Trusts** app.
56
+1. Open **Active Directory Domains and Trusts**.
6057
6158
1. In the console tree, right-click the domain node, and then select **Properties**.
6259
63
−1. The **Properties** dialog box shows the current domain and forest functional level.
60
+1. The **Properties** dialog shows the current domain and forest functional level.
6461
6562
### [PowerShell](#tab/PowerShell)
6663
67
−To view the domain or forest functional level using PowerShell, follow these steps.
64
+To view the domain or forest functional level by using PowerShell, complete these steps.
6865
6966
1. Sign in to a computer with the AD DS Remote Server Administration Tools (RSAT) installed.
7067
⋯ 17 unchanged lines
8885
8986
## Raise the functional level
9087
91
−To raise the domain and forest functional levels, you can use the Active Directory Domains and Trusts console or Windows PowerShell. The following sections describe how to raise the functional levels using these methods.
88
+To raise the domain and forest functional levels, you can use the Active Directory Domains and Trusts console or Windows PowerShell. The following sections describe how to raise the functional levels by using these methods.
9289
9390
> [!WARNING]
94
−> Changes to the domain and forest functional levels are irreversible. In order to undo the change, you must perform a forest recovery to revert to an earlier point of time.
91
+> Changes to the domain and forest functional levels are irreversible. In order to undo a change, you must perform a forest recovery to revert to an earlier point in time.
9592
9693
> [!IMPORTANT]
97
−> If all domain controllers in all domains in the forest are running Windows Server 2025, it isn't necessary to raise individual domain functional levels manually as raising the forest functional level to Windows Server 2025 automatically raises the domain functional level of all domains in the forest to Windows Server 2025.
94
+> If all domain controllers in all domains in the forest are running Windows Server 2025, it isn't necessary to raise individual domain functional levels manually because raising the forest functional level to Windows Server 2025 automatically raises the domain functional level of all domains in the forest to Windows Server 2025.
9895
9996
### [Desktop](#tab/desktop)
10097
101
−To raise the domain or forest functional level using the Active Directory Domains and Trusts console, follow these steps.
98
+To raise the domain or forest functional level by using the Active Directory Domains and Trusts console, complete these steps.
10299
103100
1. Sign in to a computer with the AD DS Remote Server Administration Tools (RSAT) installed.
104101
105
−1. Select the Start menu, then enter _Active Directory Domains and Trusts_ in the search box.
102
+1. Select the Start menu and enter _Active Directory Domains and Trusts_ in the search box.
106103
107
−1. Open the **Active Directory Domains and Trusts** app.
104
+1. Open **Active Directory Domains and Trusts**.
108105
109106
1. In the console tree, right-click the domain node, and then select **Raise Domain Functional Level**.
110107
⋯ 1 unchanged line
112109
113110
1. When prompted, select **OK** to confirm the change.
114111
115
−1. Once the domain functional level is raised, raise the forest functional level. In the console tree, right-click **Active Directory Domains and Trusts** , and then select **Raise Forest Functional Level**.
112
+1. After the domain functional level is raised, raise the forest functional level. In the console tree, right-click **Active Directory Domains and Trusts** , and then select **Raise Forest Functional Level**.
116113
117114
1. In **Select an available forest functional level**, select the value and then select **Raise**.
118115
⋯ 1 unchanged line
120117
121118
### [PowerShell](#tab/PowerShell)
122119
123
−To raise the domain or forest functional level using PowerShell, follow these steps.
120
+To raise the domain or forest functional level by using PowerShell, complete these steps.
124121
125122
1. Sign in to a computer with the AD DS Remote Server Administration Tools (RSAT) installed.
126123
⋯ 7 unchanged lines
134131
135132
1. To confirm the change, select **Y**.
136133
137
−1. Once the domain functional level is raised, run the following command to raise the forest functional level, replacing `<level>` with the desired forest functional level.
134
+1. After the domain functional level is raised, run the following command to raise the forest functional level, replacing `<level>` with the desired forest functional level.
138135
139136
```powershell
140137
Set-ADForestMode -Identity <forest> -ForestMode <level>
⋯ 13 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/windowsserverdocs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 02:30 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.