RE: [ActiveDir] Domain and Forest Functional Levels

[Dean Wells]

One minor recommendation - use the partitions container's crossRef objects to determine the domain functional level as it allows you (in a multi-domain forest) to retrieve everything from a single DC (no GC requirement or purpose here).  For the most up-to-date dom. func. level, use the PDC FSMO per domain or the Schema FSMO for the forest.  Further, you can determine a great deal using an unauthenticated connection against a 2003 DC's RootDSE, see LDP sample output below -    1> domainFunctionality: 2 = ( DS_BEHAVIOR_WIN2003 );  1> forestFunctionality: 2 = ( DS_BEHAVIOR_WIN2003 );  1> domainControllerFunctionality: 2 = ( DS_BEHAVIOR_WIN2003 );   -- Dean Wells MSEtechnology * Email: dwells@msetechnology.com http://msetechnology.com   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jorge de Almeida Pinto Sent: Wednesday, August 18, 2004 11:31 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Domain and Forest Functional Levels To determine the DFL Attribute “nTMixedDomain” of the domain-object (blabla.com) “DC=BLABLA,DC=COM” Attribute “msDS-Behavior-Version” of the domain-object (blabla.com) “DC=BLABLA,DC=COM”               If nTMixedDomain = "1" And msDS-Behavior-Version = "0" Then DFL = "Windows 2000 Mixed (DEFAULT INSTALL VALUE)"             If nTMixedDomain = "0" And msDS-Behavior-Version = "0" Then DFL = "Windows 2000 Native"             If nTMixedDomain = "0" And msDS-Behavior-Version = "1" Then DFL = "Windows Server 2003 Interim"             If nTMixedDomain = "0" And msDS-Behavior-Version = "2" Then DFL = "Windows Server 2003"   To determine the FFL Attribute “msDS-Behavior-Version” of the partitions-object (root domain = blabla.com) “CN=Partitions, CN=Configuration,DC=BLABLA,DC=COM”             If msDS-Behavior-Version = "0" Then FFL = "Windows 2000 (DEFAULT INSTALL VALUE)" If xNTFORESTdsbeh = "1" Then FFL = "Windows Server 2003 Interim"             If xNTFORESTdsbeh = "2" Then FFL = "Windows Server 2003"   Regards,   Jorge From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: woensdag 18 augustus 2004 17:03 To: [EMAIL PROTECTED] Subject: [ActiveDir] Domain and Forest Functional Levels   Using VBScript, I would like to pull the domain and forest functional levels in a mixed 2000 and 2003 forest.  What attributes am I looking for? Thanks Mark Hocraffer RockwellCollins This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.