[Samba] Questions on Raising Functional levels

[Marc Muehlfeld]

Hello James,

Am 15.05.2014 17:43, schrieb lp101:
>      Does raising the domain level need to be done on all DC's running
> in the Forest or just one?

Just on one.




 > How about the forest level? The wiki makes me
> believe only one is needed.

Yes.



 > Will rasing the functional levels prevent
> any samba4 version from joining the domain?

No.






>   * Advanced Encryption Standard (AES 128 and AES 256) support for the
>     Kerberos protocol. In order for TGTs to be issued using AES, the
>     domain functional level must be Windows Server 2008 or higher and
>     the domain password needs to be changed.
>
>     For more information, see Kerberos Enhancements
>     <http://technet.microsoft.com/library/cc749438%28WS.10%29.aspx>.
>
>   * Last Interactive Logon Information
>
>     Last Interactive Logon Information displays the following information:
>
>       o The total number of failed logon attempts at a domain-joined
>         Windows Server 2008 server or a Windows Vista workstation
>
>       o The total number of failed logon attempts after a successful
>         logon to a Windows Server 2008 server or a Windows Vista
> workstation
>
>       o The time of the last failed logon attempt at a
>         Windows Server 2008 or a Windows Vista workstation
>
>       o The time of the last successful logon attempt at a
>         Windows Server 2008 server or a Windows Vista workstation
>
>
> Does Samba currently support these? Thanks.

Sorry. For this I don't have an answer. :-)


Regards,
Marc