Configuring and Maintaining the Active Directory Infrastructure - MCTS Guide to Microsoft Windows Server 2008 Active Directory Configuration - page 406

3. In the Raise domain functional level dialog box, click the Select an available domain func-
tional level list arrow, and then click Windows Server 2008 . Click the Raise button. In the
warning message informing you that the process can't be reversed, click OK . Click OK in
the message box stating the functional level was raised successfully.
4. Right-click the Active Directory Domains and Trusts node and click Raise Forest Functional
Level .
If you want to raise forest and domain functional levels to the same level,
you can raise the forest functional level first, and the domain functional
level is raised automatically in all domains to match the forest's new func-
tional level. All domain controllers must be running an OS version that
supports the chosen functional level.
5. In the Raise forest functional level dialog box, click the Select an available forest functional
level list arrow, and then click Windows Server 2008 . Click the Raise button. In the warn-
ing message informing you that the process can't be reversed, click OK . Click OK in the mes-
sage stating the functional level was raised successfully.
6. Now that you're at the Windows Server 2008 functional level for the forest and domain,
verify that some of the added features are available. Right-click the W2k8ad1XX.com node
and click Properties . Click the Trusts tab.
7. Click New Trust . Notice that your choices are now four different trust types, including the
option to create a trust with another forest. Click Cancel twice, and close Active Directory
Domains and Trusts.
8. Open a command prompt window. Try the redircmp command again by typing redircmp
"ou=NewCompOU,dc=w2k8ad1XX,dc=com" and pressing Enter .
9. The command you typed should have completed successfully. To test it, create a new com-
puter with the Net computer command, which doesn't allow using the Active Directory path
when creating new objects. Type net computer \\NewComputer /Add and press Enter . The
command should complete successfully.
10. Open Active Directory Users and Computers and click the NewCompOU OU to verify that
the NewComputer account you created has been added.
11. Log off the server and log back on as Administrator.
12. Open Active Directory Users and Computers and click the Users container. Open the
Properties dialog box for the Administrator account, and click the Attribute Editor tab.
Scroll down to the lastLogonTimeStamp attribute and verify that it contains a value.
13. Close all open windows, and stay logged on to Server1XX for the next activity.
Adding and Removing Domains
When you're installing Windows Server 2008 domain controllers in a new forest, the process is
straightforward, as you have seen. However, installing new Windows Server 2008 domain con-
trollers in existing Windows Server 2003 or Windows 2000 Server domains and forests is also
common. With each successive version of the Windows OS, new features are added, and the
schema changes, with new objects and object attributes. Before you can install a Windows Server
2008 server as a domain controller in an existing Windows Server 2003 or Windows 2000 Server
domain, you must prepare existing domain controllers for the Windows Server 2008 domain
controller and the schema changes it will bring.
Preparing a Forest and Domain for Windows
Server 2008 with Adprep
The Adprep command-line program prepares an existing forest or domain for the addition of a
Windows Server 2008 domain controller. Adprep.exe is on the Windows Server 2008 installation