[Samba] Raise Domain Level, Forest Level and Schema for Bitlocker integration
Kees van Vloten
keesvanvloten at gmail.com
Wed Mar 20 18:40:33 UTC 2024
On 20-03-2024 18:14, Paul Littlefield via samba wrote:
> On 18/03/2024 15:44, Paul Littlefield via samba wrote:
>>
>> I would like to add BitLocker integration to the three DCs we have
>> running 4.15.13 on Ubuntu 22.04 LTS.
>>
>> The DC has been around a while and is currently on Schema version 47
>> and Domain level 2008_R2.
>>
>> Can I confirm that the procedure to upgrade the three DCs is as
>> follows:-
>>
>> 1) backup
>> 2) upgrade domain and forest to latest 2012_R2
>> 3) upgrade the schema to latest 2012_R2
>>
>> Also, in what order of DCs should I perform these changes?
>>
>> DC5 (FSMO Role)
>> DC6
>> DC7
>
> Did anyone have a comment on this please?
>
You can use Bitlocker without raising the domain / forest level.
I have implemented it according to the docs from Transquil IT:
https://samba.tranquil.it/doc/en/samba_advanced_methods/samba_bitlocker_ad.html
It works for me.
- Kees.
More information about the samba
mailing list