6.1.4.4 msDS-Behavior-Version: Forest Functional Level
The msDS-Behavior-Version for the forest is written on the crossRefContainer object (see section 6.1.1.2.1). Only the Domain Naming Master FSMO role owner accepts updates to this attribute.
Requirements: The value of msDS-Behavior-Version for the forest is never larger than any functional level of any domain NC in the forest.
The absence of the msDS-Behavior-Version attribute on a crossRefContainer object is equivalent to the msDS-Behavior-Version attribute on that object having the value zero.
The value msDS-Behavior-Version defines the lower limit on the version of the server operating system that can run on domain controllers within the forest. Ensuring this lower limit allows advanced features to be enabled throughout the forest.
The following values are defined.
|
Identifier |
Domain controller operating systems or products that are allowed in the forest |
Value |
|---|---|---|
|
DS_BEHAVIOR_WIN2000 * |
Windows 2000 Server operating system through Windows Server 2008 operating system |
0 |
|
DS_BEHAVIOR_WIN2003_WITH_MIXED_DOMAINS * |
Windows Server 2003 operating system through Windows Server 2016 operating system |
1 |
|
DS_BEHAVIOR_WIN2003 |
Windows Server 2003 Active Directory Application Mode (ADAM) Windows Server 2003 R2 operating system through Windows Server 2016 |
2 |
|
DS_BEHAVIOR_WIN2008 |
Windows Server 2008 and later |
3 |
|
DS_BEHAVIOR_WIN2008R2 |
Windows Server 2008 R2 operating system and later |
4 |
|
DS_BEHAVIOR_WIN2012 |
Windows Server 2012 operating system and later |
5 |
|
DS_BEHAVIOR_WIN2012R2 |
Windows Server 2012 R2 operating system and later |
6 |
|
DS_BEHAVIOR_WIN2016 |
Windows Server 2016 and later |
7 |
* Not available in AD LDS.