6.1.4.4 msDS-Behavior-Version: Forest Functional Level

The msDS-Behavior-Version for the forest is written on the crossRefContainer object (see section 6.1.1.2.1). Only the Domain Naming Master FSMO role owner accepts updates to this attribute.

Requirements: The value of msDS-Behavior-Version for the forest is never larger than any functional level of any domain NC in the forest.

The absence of the msDS-Behavior-Version attribute on a crossRefContainer object is equivalent to the msDS-Behavior-Version attribute on that object having the value zero.

The value msDS-Behavior-Version defines the lower limit on the version of the server operating system that can run on domain controllers within the forest. Ensuring this lower limit allows advanced features to be enabled throughout the forest.

The following values are defined.

Identifier

Domain controller operating systems or products that are allowed in the forest

Value

DS_BEHAVIOR_WIN2000 *

Windows 2000 Server operating system through Windows Server 2008 operating system

0

DS_BEHAVIOR_WIN2003_WITH_MIXED_DOMAINS *

Windows Server 2003 operating system through Windows Server 2016 operating system

1

DS_BEHAVIOR_WIN2003

Windows Server 2003

Active Directory Application Mode (ADAM)

Windows Server 2003 R2 operating system through Windows Server 2016

2

DS_BEHAVIOR_WIN2008

Windows Server 2008 and later

3

DS_BEHAVIOR_WIN2008R2

Windows Server 2008 R2 operating system and later

4

DS_BEHAVIOR_WIN2012

Windows Server 2012 operating system and later

5

DS_BEHAVIOR_WIN2012R2

Windows Server 2012 R2 operating system and later

6

DS_BEHAVIOR_WIN2016

Windows Server 2016 and later

7

* Not available in AD LDS.