-
Notifications
You must be signed in to change notification settings - Fork 144
ADForestFunctionalLevel
Simon Heather edited this page Jan 15, 2020
·
8 revisions
| Parameter | Attribute | DataType | Description | Allowed Values |
|---|---|---|---|---|
| ForestIdentity | Key | String | Specifies the Active Directory forest to modify. You can identify a forest by its fully qualified domain name (FQDN), GUID, DNS host name, or NetBIOS name. | |
| ForestMode | Required | String | Specifies the the functional level for the Active Directory forest. | Windows2008R2Forest, Windows2012Forest, Windows2012R2Forest, Windows2016Forest |
This resource changes the forest functional level. For further details, see Forest and Domain Functional Levels.
WARNING: This action might be irreversible! Make sure you understand the consequences by changing a functional level.
Read more about raising function levels and potential roll back scenarios in the Active Directory documentation, for example: Upgrade Domain Controllers to Windows Server 2016.
- Target machine must be running Windows Server 2008 R2 or later.
- Target machine must be running the minimum required operating system version for the forest functional level to set.
This configuration will change the forest functional level to a Windows Server 2012 R2 Forest.
Configuration ADForestFunctionalLevel_SetLevel_Config
{
Import-DscResource -ModuleName ActiveDirectoryDsc
node localhost
{
ADForestFunctionalLevel 'ChangeForestFunctionalLevel'
{
ForestIdentity = 'contoso.com'
ForestMode = 'Windows2012R2Forest'
}
}
}- ADComputer
- ADDomain
- ADDomainController
- ADDomainControllerProperties
- ADDomainDefaultPasswordPolicy
- ADDomainFunctionalLevel
- ADDomainTrust
- ADFineGrainedPasswordPolicy
- ADForestFunctionalLevel
- ADForestProperties
- ADGroup
- ADKDSKey
- ADManagedServiceAccount
- ADObjectEnabledState
- ADObjectPermissionEntry
- ADOptionalFeature
- ADOrganizationalUnit
- ADReadOnlyDomainControllerAccount
- ADReplicationSite
- ADReplicationSiteLink
- ADReplicationSubnet
- ADServicePrincipalName
- ADUser
- WaitForADDomain