+关注继续查看

Windows 2000 native

All of the default AD DS features and the following directory features are available:

• Universal groups for both distribution and security groups.
• Group nesting
• Group conversion, which allows conversion between security and distribution groups
• Security identifier (SID) history
 Note In Windows Server 2008 R2, the Personal Virtual Desktop feature was introduced. It requires the Windows 2000 native domain functional level.
• Windows 2000
• Windows Server 2003
• Windows Server 2008
• Windows Server 2008 R2

Windows Server 2003

All the default AD DS features, all the features that are available at the Windows 2000 native domain functional level, and the following features are available:

• The domain management tool, Netdom.exe, which makes it possible for you to rename domain controllers
The lastLogonTimestamp attribute is updated with the last logon time of the user or computer. This attribute is replicated within the domain.
• The ability to set the userPassword attribute as the effective password on inetOrgPerson and user objects
• The ability to redirect Users and Computers containers
By default, two well-known containers are provided for housing computer and user accounts, namely, cn=Computers,<domain root> and cn=Users,<domain root>. This feature allows the definition of a new, well-known location for these accounts.
• The ability for Authorization Manager to store its authorization policies in AD DS
• Constrained delegation
Constrained delegation makes it possible for applications to take advantage of the secure delegation of user credentials by means of Kerberos-based authentication.
You can restrict delegation to specific destination services only.
• Selective authentication
Selective authentication makes it is possible for you to specify the users and groups from a trusted forest who are allowed to authenticate to resource servers in a trusting forest.
• Windows Server 2003
• Windows Server 2008
• Windows Server 2008 R2

Windows Server 2008

All of the default AD DS features, all of the features from the Windows Server 2003 domain functional level, and the following features are available:

• Distributed File System (DFS) replication support for the Windows Server 2003 System Volume (SYSVOL)
DFS replication support provides more robust and detailed replication of SYSVOL contents.
• Domain-based DFS namespaces running in Windows Server 2008 Mode, which includes support for access-based enumeration and increased scalability. Domain-based namespaces in Windows Server 2008 mode also require the forest to use the Windows Server 2003 forest functional level. For more information, seeChoose a Namespace Type (http://go.microsoft.com/fwlink/?LinkId=180400).
• Advanced Encryption Standard (AES 128 and AES 256) support for the Kerberos protocol
• Last Interactive Logon Information
Last Interactive Logon Information displays the following information:
• The total number of failed logon attempts at a domain-joined Windows Server 2008 server or a Windows Vista workstation
• The total number of failed logon attempts after a successful logon to a Windows Server 2008 server or a Windows Vista workstation
• The time of the last failed logon attempt at a Windows Server 2008 or a Windows Vista workstation
• The time of the last successful logon attempt at a Windows Server 2008 server or a Windows Vista workstation

Fine-grained password policies make it possible for you to specify password and account lockout policies for users and global security groups in a domain. For more information, see Step-by-Step Guide for Fine-Grained Password and Account Lockout Policy Configuration (
• Personal Virtual Desktops
To use the added functionality provided by the Personal Virtual Desktop tab in the User Account Properties dialog box in Active Directory Users and Computers, your AD DS schema must be extended for Windows Server 2008 R2 (schema object version = 47). For more information, see
Deploying Personal Virtual Desktops by Using RemoteApp and Desktop Connection Step-by-Step Guide (http://go.microsoft.com/fwlink/?LinkId=183552).
• Windows Server 2008
• Windows Server 2008 R2

Windows Server 2008 R2

All default Active Directory features, all features from the Windows Server 2008 domain functional level, plus the following features:

• Authentication mechanism assurance, which packages information about the type of logon method (smart card or user name/password) that is used to authenticate domain users inside each user’s Kerberos token. When this feature is enabled in a network environment that has deployed a federated identity management infrastructure, such as Active Directory Federation Services (AD FS), the information in the token can then be extracted whenever a user attempts to access any claims-aware application that has been developed to determine authorization based on a user’s logon method.
• Automatic SPN management for services running on a particular computer under the context of a Managed Service Account when the name or DNS host name of the machine account changes. For more information about Managed Service Accounts, see Service Accounts Step-by-Step Guide (http://go.microsoft.com/fwlink/?LinkId=180401).
• Windows Server 2008 R2

10092 0

11633 0
windows server 2008阿里云ECS服务器安全设置

9161 0

13893 0

4660 0

7503 0

22409 0
+关注
1338

0

《2021云上架构与运维峰会演讲合集》

《零基础CSS入门教程》

《零基础HTML入门教程》