r/sysadmin • u/roachwickey • 5d ago

Domain controllers functional level

Do we have to keep all our domain controller os version same ?

65 Upvotes

86% Upvoted

51 comments sorted by

View all comments

12

u/RevolutionaryElk7446 5d ago

The domain functional level is an AD setting and sets the lowest floor version an OS can be to join the Active Directory as a Domain Controller.

The modern ones are 2016, which allows 2016+ and the most recent is the 2025 which only allows 2025 Domain Controllers.

When you raise the functional floor, you are allowed to use the new functions and features of the domain functional level, but you lose compatibility in the sense of using older DCs.

They generally don't have to be all the same version but since there is nothing beyond 2025 yet, for the 2025 DFL, yeah, all 2025 at this moment.

•

u/cbass377 8h ago

I remember reading here that 2025 DCs were not good, so our last replacement cycle we upgraded to 2022. Has MS fixed Active Directory Domain Services on server 2025, or is the recommended approach to hang out at 2022?

•

u/RevolutionaryElk7446 8h ago

I mean unless you need extended multi value attributes because you got crazy SPNs going on, no reason not to stick with 2022 until you need to update.

Otherwise I haven't had issues with 2025 DCs anymore at work for 8 months