Nartac Software releases IIS Crypto 3.3 on October 31, 2022. This IIS Crypto update adds…
Which AD forest and domain functional level are you running in the organization? Are you on the latest version? In this article, you will learn how to check the forest and domain functional level.
Table of contents
Check forest and domain functional level with GUI
To find the AD forest and domain functional level with GUI, follow these steps:
1. Sign in to the Domain Controller.
2. Start Server Manager.
3. Click on Tools > Active Directory Domains and Trusts.
4. Right-click the domain and click on Properties.
5. In the General tab, the Domain functional level and Forest functional level appear.
Check forest functional level with PowerShell
Find the AD forest functional level with PowerShell.
Run PowerShell as administrator and run the Get-ADForest cmdlet.
PS C:\> Get-ADForest | fl Name, ForestMode Name : exoip.local ForestMode : Windows2016Forest
Check domain functional level with PowerShell
Find the AD domain functional level with PowerShell.
Run PowerShell as administrator and run the Get-ADDomain cmdlet.
PS C:\> Get-ADDomain | fl Name, DomainMode Name : exoip DomainMode : Windows2016Domain
Get forest and domain functional level with PowerShell script
An excellent way to get the AD forest and domain functional level is to run the Get-ADInfo.ps1 PowerShell script. This will show the Active Directory forest and functional level and more information about your Active Directory.
PS C:\> cd C:\scripts PS C:\scripts> .\Get-ADinfo.ps1 Active Directory Info Computers = 8 Workstions = 3 Servers = 5 Users = 5143 Groups = 88 Active Directory Forest Name = exoip.local Active Directory Forest Mode = Windows2016Forest Active Directory Domain Mode = Windows2016Domain Active Directory Schema Version is 88 which corresponds to Windows Server 2019/Windows Server 2022 FSMO Role Owners Schema master DC01-2019.exoip.local Domain naming master DC01-2019.exoip.local PDC DC01-2019.exoip.local RID pool manager DC01-2019.exoip.local Infrastructure master DC01-2019.exoip.local The command completed successfully.
You learned how to check forest and domain functional level. You can get the forest and domain functional level with the GUI or PowerShell. I recommend using the Get-ADInfo.ps1 PowerShell script because this will show you more AD information.
Did you enjoy this article? You may also like Remove orphaned SIDs with PowerShell. Don’t forget to follow us and share this article.