Exchange Server 2003 SP2 - Forest and Domain Functional Level Limitations

Hi All
Bit of a legacy question and theres not much clarity out there..
I need to confirm the highest DFL and FFL Supported by Microsoft for Exchange 2003 SP2?
We currently have a mix of 2003 R2 and 2008 R2 domain controllers with the FFL and DFL currently set at 2003 R2.
The plan is to move to Exchange 2010 in the very near future, so the question is do we need to wait until we upgrade to Exchange 2010 Before upgrading the DFL and FFL to 2008 R2?
From what Ive read we will need to complete the Exchange upgrade first before moving forward with the functional level upgrades..
Thanks in advance
Bull

Hi Bull,
As Ed mentioned, Exchange server 2003 and Exchange 2010 support Windows Server 2003 domain functional level and Windows Server 2003 forest functional level, also supported in higher environment.
More details about it, please refer to “Supported Active Directory environment” section:
http://technet.microsoft.com/en-us/library/ff728623(v=exchg.150).aspx
Note that we cannot add new DCs which are the less version of Windows Server
cannot be added to the domain or forest. More details about
the Impact of Upgrading the Domain or Forest Functional Level, for your reference:
http://blogs.technet.com/b/askds/archive/2011/06/14/what-is-the-impact-of-upgrading-the-domain-or-forest-functional-level.aspx
Best Regards,
Allen Wang

Similar Messages

  • Upgrading Forest and Domain Functional level

    Hi Everyone,
    If I have a mixed machines (Win2k3, Win 2k8 and Win2k12) and if I want to raise the forest and functional level to win2k12. Can I still have Win2k3 and Win2k8 machines as a member server? If yes, what would be the effect on the functionality of the machines?
    To give you info win2k3 are used for internal webservers and Win2k8 is use as a DFS server.

    Hiya,
    "Functional levels determine the available Active Directory Domain Services (AD DS) domain or forest capabilities. They also determine which Windows Server operating systems you can run on domain controllers in the domain or forest. However,
    functional levels do not affect which operating systems you can run on workstations and member servers that are joined to the domain or forest."
    http://technet.microsoft.com/library/understanding-active-directory-functional-levels%28v=WS.10%29.aspx
    That said, you might have some applications running on those servers, which matches a specific domain version. Listing attributes in a certain order, expecting a certain name etc.

  • Forest and domain functional level Windows Server 2012 R2 - what's new?

    Hi, I still can't find documentation about the new domain and forest functional levels in WS 2012 R2.
    a) "What's New in Active Directory in Windows Server 2012 R2"
    http://technet.microsoft.com/en-us/library/dn268294.aspx
    No word about it.
    b) "Understanding Domain and Forest Functional Levels"
    http://technet.microsoft.com/en-us/library/cc771294.aspx
    Still WS 2012.
    Thorsten

    For what's New in Active Directory in windows server 2012 R2,
    Read the following Blog
    http://policelli.com/blog/archive/2013/06/27/whats-new-in-active-directory-in-windows-server-2012-r2-preview/
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer".

  • Compatibility Exchange Server 2003 SP2 and Domain controllers Windows Server 2008 R2

    Hi all, I have this scenario:
    - Two Domain Controllers Windows Server 2003 R2 SP2
    - Two mail servers Exchange Server 2003 with the following version:
      6.5 (Build 7638.2 Service Pack 2)
    I want to upgrade my domain controllers to Windows Server 2008 R2.
    My question is whether exchange Server 2003 6.5 (Build 7638.2 Service Pack 2) is supported with Domain Controllers Windows Server 2008 R2.
    Can you tell me some official Microsoft website where this reflected?
    regards
    Microsoft Certified IT Professional Server Administrator

    Exchange Server 2003 SP2 supports DCs running Windows Server 2008 R2. These DCs should be RWDCs and not RODCs:
    Exchange 2003 SP2 will now be supported against writeable Windows Server 2008 R2 Active Directory Servers.  Additionally, with the General Availability of Exchange Server 2010, and those looking to standardize on Windows
    Server 2008 R2 we have enhanced the supportability of forest and domain functional levels up to Windows Server 2008 R2.  This change is effective immediately on Exchange 2003 SP2.
    Reference: http://blogs.technet.com/b/exchange/archive/2009/11/30/3408893.aspx
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Lync 2013 and Raising Forest/Domain Functional Level?

    My current forest and domain functional levels are 2008 R2. I know I can safely upgrade the functional levels in most cases, but I want to specifically know with regards to Lync.
    Our entire environment, including Lync, is running on Windows Server 2012 R2. (We have no domain joined clients.) We are running Lync 2013 Standard with all the latest updates.
    Can I safely raise the forest and domain functional levels to 2012 R2 without impacting Lync?

    Hi,
    Yes, you can raise Forest and domain function level to Windows Server 2012 R2 without issue.
    After raising Forest\domain function level, the new features that rely on the functional level are generally limited to AD itself. Regardless, changing the Domain or Forest Functional Level should have no impact on an application that depends on
    Active Directory.
    More details:
    http://blogs.technet.com/b/askds/archive/2011/06/14/what-is-the-impact-of-upgrading-the-domain-or-forest-functional-level.aspx
    Best Regards,
    Eason Huang
    Eason Huang
    TechNet Community Support

  • Domain Functional Level: 2008 R2 to 2012 R2

    My current forest and domain functional levels are 2008 R2. I know I can safely upgrade the functional levels in most cases, but I want to specifically know with regards to Lync.
    Our entire environment, including Lync, is running on Windows Server 2012 R2. (We have no domain joined clients.)
    Can I safely raise the forest and domain functional levels to 2012 R2 without impacting Lync?

    you can easily upgrade the funtional level without any issues since you have all the Domain Controllers on Win server 2008R2.
    http://support2.microsoft.com/kb/2869728/en-us
    For more details : Listed below link has the table which shows the effects of upgrading the domain functional levels to Windows 2012
    http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels
    pankaj(MCT)

  • A problem with Win 7 Pro, Outlook Web Access based on Exchange Server 2003, and two different domains

    Dear Microsoft Support,
    As mentioned in the title,
    I have two domains. One is Domain A at HQ. The other one is Domain A at branch office. A laptop having Win 7 Pro OS is a client of Domain A. The Domain A has Exchange Server 2003. Users of Domain B get connected to Exchange Server for email services. In
    all clients of the Domain B, IP address of the email server added in C:\Windows\System 32\drivers\etc\host file.
    Whereas in the clients of Domain A it was not done, because all the servers including the email server belong to the Domain A.
    Now, a user with Domain A's client (it is a laptop) came to Branch office and wanted to access the Outlook (using Outlook Web Access). since there is no IP address added in the Host file of the laptop, connectivity to email is not possible. When I try to
    add the IP address, I was not able to do so due to Domain A's security reasons.
    So, let me know, is there a way out to add the IP address in the host file of the Domain A's client.
    Thanks in advance.
    Ravi Sekhar Modukuru

    I would suggest adding the mailserver address in Domain B's DNS. Would that be possible?
    I agree. The correct solution in this case (since it appears you already have a two-way Domain Trust in place) is to properly configure DNS in Domain 'B' to be a secondary of Domain 'A' and completely eliminate the need to maintain the HOSTS file.
    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

  • Logon failure after upgrade Windows 2003 domain functional level and schema

    Before upgrade:
    Windows 2003 Std server: Domain functional level 2000, Schema verion 30
    Crystal Report XI R2: Authentication: Windows AD
    Logon OK.
    After Upgrade:
    Windows 2003 Std + Windows 2008: Domain functional level 2003, Schema verion 44
    Crystal Report XI R2: Authentication: Windows AD
    Logon Error: An error has occurred: java.lan.NullPointerException
    Is it a Tomcat problem?  OR Java runtime problem?  OR XI R2 problem?
    Anyone can help to fix it!?  Thanks!!

    OK, I try again in the testing lab and simplify the combination.  We only consider Windows 2003 ONLY.
    Before AD upgrade:
    AD/Domain Controller: Windows 2003 Std server: Domain functional level 2000, Schema verion 30
    Crystal Report XI R2: run on Windows 2003 memeber server
    Operating OS: Windows XP/Vista/7: Authentication: Windows AD
    Logon OK.
    Upgrade cmbination 1
    Step 1:
    Upgrade Domain controller: Windows 2003 to Windows 2003 R2 (Domain functional level 2000, Schema verion 31 )
    Crystal Report XI R2: run on Windows 2003 memeber server
    Operating OS: Windows XP/Vista/7: Authentication: Windows AD
    Logon OK.
    Step 2:
    Upgrade Domain Functional Level: Windows 2003 R2 (Domain functional level 2003, Schema verion 31)
    Crystal Report XI R2: run on Windows 2003 memeber server
    Operating OS: Windows XP/Vista/7: Authentication: Windows AD
    Logon Fail
    Logon Error: An error has occurred: java.lan.NullPointerException
    Upgrade combination 2
    Direct upgrade Domain Functional Level: Windows 2003 (Domain functional level 2003, Schema verion 30)
    Crystal Report XI R2: run on Windows 2003 memeber server
    Operating OS: Windows XP/Vista/7: Authentication: Windows AD
    Logon Fail
    Logon Error: An error has occurred: java.lan.NullPointerException
    In this testing, we can conclude that the Domain Functional Level upgrade from 2000 to 2003. The MI logon will fail.
    Q1. Crystal Report XI R2 cannot run on Windows 2003 server (Domain Functional Level: 2003)?
    Q2. If Crystal Report XI R2 can run on Domain Functional Leve: 2003, how to fix our problem?
    Do you have any idea to help us?  Thanks!
    Edited by: Initiator on Jul 20, 2010 6:22 AM

  • Exchange Server 2003 Email setup on IPHONE and IPOD Touch

    Hi we have Exchange Server 2003 (SP2) on Windows Standard Server 2003 and we can access OWA from any browser and also am able to setup Exchange server Emails on Blackberry device without any problem but when I try to setup on IPHONE or IPOD touch I get error message saying Can not connet to server. I tried to get the answer on google and seems like it should work but seems like I need to some other settings on exchange server to setup exchange server email on Iphone or Ipod. Any idea what could be the issue.

    Sorry I forgot to tell you that I tried without Exchange also.
    I tested my activsync Connectivity test from https://testexchangeconnectivity.com/ and it fails at SSL. (Port 80 and 443 shows open and passed) In our server we bought SSL scertificate last year from godaddy and installed as I thought it requires but later on I removed as I was not able to setup iphone. So I don't know what could be the exact problem.

  • DPM 2010 - Exchange Server 2003 Re-Directed Restore

    Hello people. I am looking for some help. We currently have DPM 2010 on Windows 2008 R2 backing up Exchange Server 2003 SP2 on Windows 2003. We are trying to migrate our existing Exchange server DBs (physical server) to another Exchange Server 2003(VMware
    VM) in the same domain and site. We are trying not to go the P2V route if at all possible. The existing Exchange DBs are about 1.3TB in size. The existing server has 4 Storage Groups, with a total of about 20 mailbox stores. We are trying to
    get the data migrated within a 48 hour window, which at this point eliminates moving the mailboxes to the new server using Exchange task - Move Mailbox. I am also thinking RSG would not be a good option for us as the existing mailbox server will remain operational
    until all the data has been migrated to the new server.
    Is anyone out there aware of a document that walks through the process of doing a re-directed restore of Exchange Server 2003 DBs, backed up using DPM 2010? If a redirected restore can be done, how does AD get updated to reflect the new HomeServer for users'
    mailboxes? Can the DBs simply be restored as raw files to the new server and be successfully mounted?
    Thank you in advance for your support.
    TD
    TD

    Hello people. I am looking for some help. We currently have DPM 2010 on Windows 2008 R2 backing up Exchange Server 2003 SP2 on Windows 2003. We are trying to migrate our existing Exchange server DBs (physical server) to another Exchange Server 2003(VMware
    VM) in the same domain and site. We are trying not to go the P2V route if at all possible. The existing Exchange DBs are about 1.3TB in size. The existing server has 4 Storage Groups, with a total of about 20 mailbox stores. We are trying to
    get the data migrated within a 48 hour window, which at this point eliminates moving the mailboxes to the new server using Exchange task - Move Mailbox. I am also thinking RSG would not be a good option for us as the existing mailbox server will remain operational
    until all the data has been migrated to the new server.
    Is anyone out there aware of a document that walks through the process of doing a re-directed restore of Exchange Server 2003 DBs, backed up using DPM 2010? If a redirected restore can be done, how does AD get updated to reflect the new HomeServer for users'
    mailboxes? Can the DBs simply be restored as raw files to the new server and be successfully mounted?
    Thank you in advance for your support.
    TD
    TD

  • Upgrading Exchange Server 2003 to 2010 to 2013 is worth???

    Hello there, I am planning to upgrade about 30 users from exchange server 2003 to 2010 and finally to 2013. Is it worth to upgrade in this way because this steps are hard and very time consuming. What if, if I just copy all the user mailboxes directly to
    exchange server 2013 and configure 2013 as a new exchange server and decommission old exchange server 2003?
    How to copy user mailboxes to fresh exchange server 2013?
    Please help me out.
    Thankx

    Yes, Export the PST from User Mailbox and Import it into Exchange 2013 Mailbox. But the problem is, you can't install Exchange 2013 in your current Exchange 2003 environment.
    Only option is to install Exchange 2010 first and migrate all the users to Exchange 2010. Also Replicate the Public Folders too(If you are using)
    Decommission Exchange 2003 entirely. Install Exchange 2013 SP1 and Migrate the User to Exchange 2013.
    Cheers,
    Gulab Prasad
    Technology Consultant
    Blog:
    http://www.exchangeranger.com    Twitter:
      LinkedIn:
       Check out CodeTwo’s tools for Exchange admins
    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

  • AD FS Across Differing Domain Functional Levels

    My customer needs to implement AD FS for single sign on due to a cloud based email solution they recently implemented. The problem is, their domain controllers are Server 2003 (non-R2) at a functional level of 2003 mixed mode. They should be able to raise
    to 2003 native if necessary however. Their solution is to create a new 2008 domain and implement a two-way trust, running AD FS in the new domain serving the clients in the 2003 domain.  This way should be quicker than upgrading their current domain
    which would be a rather large project due to their size and complexity. 
    Are there any gotcha's I should know about with doing it this way?  I have verified that we can create the two-way trust between domains of these functional levels, and AD FS can service clients in a trusted domain, but I am not entirely sure if AD
    FS will care that the trusted domain is 2003 non-R2.  Can anyone confirm if this will be a feasible scenario? 
    Thanks very much!!
    Wraith

    Hi
    Wraith,
    In addition, if you are not using Windows Server 2012 or above as ADFS server, you will be fine with Windows 2003 mixed mode.
    “Since ADFS does not require Active Directory functional-level modifications to operate successfully. However, if you are using Windows NT token–based applications and
    you want a token to be generated using Kerberos Service-for-User (S4U), the domain functional level must be Windows 2000 native or Windows Server 2003”, quoted form below article:
    Appendix A: Reviewing ADFS Requirements
    http://technet.microsoft.com/en-us/library/cc778681(v=WS.10).aspx
    More information for you:
    ADFS and Domain Functional Level
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/5cc0e898-eae2-46ce-8491-5ccf61380423/adfs-and-domain-functional-level?forum=winserverDS
    ADFS requirements
    http://technet.microsoft.com/en-us/library/cc727972(v=WS.10).aspx
    Best Regards,
    Amy

  • ICal and Exchange Server 2003

    Hello from Barcelona,
    I am a new mac user trying to sync iCal with Exchange Server 2003. I have followed all instructions regarding domain, user name, password and URL address but it does not work. The last answer received was "account info not found" & "“HTTP/1.1 440 Login Timeout”. Incredible but when using the program AddressX (downloaded from internet) with the above mentioned configuration...it works and can get my company's global book address.
    Just to make sure I am following all "mac" rules. What I am using is:
    Domain/UserName
    Password
    https://company.com/exchange/User.Name
    Am I missing any important thing? Please help!!
    Thanks in advanced!!

    There are several discussions regarding this same topic on the Apple forums and elsewhere. None of them have solved the problem. This seems to be an issue that has been around for a long time but never addressed by Apple or Microsoft. From some simple tests that I have done, it appears the the Microsoft Exchange Server is not interpreting the iCal event (.ics extension) properly. I have seen discussions saying that Apple is not formatting the event properly or is using a newer standard that MS Exchange does not support. I believe it is the later as I can make the event work properly without any software changes but I have to do some steps manually. Here is how I can make it work and why I believe something is wrong in MS Exchange:
    - create event in iCal and add an Outlook user
    - send the event/email (ignore this email on the PC as it does not work)
    - open the just sent email and save the attached iCal event
    - find the saved iCal event and add a letter to the extension such as ".icss"
    - (Note: I don't know if there is a way to rename an attachment already in a message)
    - attach this renamed event to a new message and send it to the Outlook user
    - the Outlook user must open the message, save the attachment and rename it back to ".ics"
    - double clicking / opening this renamed file now works perfectly in Outlook
    Now, if I could only automate some of these steps on the Mac before I send the message would be very helpful. This is not a great solution but I use it for events that I want to sync between my home Mac and my office PC.
    Because the renamed attachment (.icss) works through Exchange (by ignoring it), I am lead to believe that MS Exchange will interpret an ".ics" extension and mess up the handling of it for some reason. Microsoft is never one to follow standards very carefully or adopt them very quickly. Our company is using Exchange 2003 so maybe that is part of the problem as it is an older version.

  • Microsoft Exchange Server 2003 and Windows 8 Compatibility

    Is there a fix or workaround for accessing email via Outlook 2013 (Windows 8) when your company uses Microsoft exchange server 2003 and has not plans on upgrading it any time soon. I am a remote employee so I am the only one that has this problem in the
    company. I can access email through an owa account but it's a pain. I tried to set up a rule to have all incoming mail forwarded to my gmail account in Outlook 2013, but that did not work. Any other ideas?

    If server has enabled ActiveSync you can use Windows 8 Mail Client - works almost like Outlook.
    AFAIR Outlook 2013 can't work with Exchange 2003.
    Regards, Konrad Sagala, MCT, MCSE+M, MCITP: Exchange 2007/2010, Lync 2010, Office365, Windows 2008, Virtualization

  • Can we install Exchange server 2003, 2007 and 2010 on Server 2012 R2 ?

    Sir, 
        I want to know whether Exchange server 2003, 2007 and 2010 can be installed on Server 2012 R2 or not.
    Thanks in advance.

    You can only install Exchange 2013 SP1 on Server 2012 R2
    As far as I know Exchange 2010 SP3 can't be installed on R2 . The other Exchange Servers are too old

Maybe you are looking for