Bryan J. Smith <[email protected]> wrote: > I think some of the issues are not related to Samba, but do > the Forest and, more importantly, Domain level of Windows AD. > ... > I cannot stress this enough, and have had to educate Windows > administrators on this over and over.
Microsoft TechNet Reference (updated for 2008 -- be sure to hit updated references from 2009-2010, not old 2004-2007 ones pre-Windows Server 2008): http://technet.microsoft.com/en-us/library/cc787290%28WS.10%29.aspx Lowe's quick'n dirty table break-down (which now rates high in Google's search index for "domain forest level", which is good): http://blogs.techrepublic.com.com/datacenter/?p=308 Again, make your Windows administrators aware that: 1. There is _never_ a reason to make a 2008 Forest level, _period_ (the 2003 Forest level is just as secure and featured as 2008) 2. There are no issues with a mix of 2003 and 2008 domain levels in a 2008 forest, and 2008R2 does 2003 just fine 3. Once you choose a higher-level, you can_not_ go back, you're stuck, and that means incompatibilities and issues (even with Windows 2008 v. 2008R2, some windows ISV software, etc...) Side note: 4. With the issues in the 2008-specific domain levels, Microsoft actually has 2008 v. 2008R2 differences, and you can roll back 2008R2 servers to 2008, to address compatibility issues. This reason alone (along with the underwelming, headache-producing "features") of 2008 domain levels is why I still install 2003 domain levels. I.e., Microsoft did _not_ get 2008 domain levels correct, and R2 modifies them in a way that is not fully compatible with pre-R2. ;) -- Bryan J Smith Professional, Technical Annoyance Linked Profile: http://www.linkedin.com/in/bjsmith ------------------------------------------------------------ "Now if you own an automatic ... sell it! You are totally missing out on the coolest part of driving" -- Johnny O'Connell _______________________________________________ rhelv5-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/rhelv5-list
