Windows 2000 domain level

gulikoza gulikoza at
Sun Mar 9 15:18:37 MDT 2014

On Sun, 09 Mar 2014 21:49:44 +0100, Matthieu Patou <mat at> wrote:

> Have a look at


> samba-tool domain level raise --help
> It might work, we don't support too well 2k Forest level.

Tried that, the domain cannot be raised because the lowest DC (samba4 in  
this case) does not support a higher level domain - the  
msDS-Behavior-Version for samba4 ntds is not set. Samba-tool will show an  
error and W2K8 will complain.

The problem is that it is impossible to move from windows 2000 and use  
samba to raise the domain level after w2k dc is retired as  
msDS-Behavior-Version is incorrectly (not) set. This seems like a bug to  
me. If you already have a higher dc, domain level needs to be raised  
before samba4 is joined as DC.

> Matthieu


More information about the samba-technical mailing list