2

At our main site we are running at 2012R2 (forest/domain) functional level and we currently have migrated our mailboxes to Office 365 using an exchange hybrid configuration with ADFS and Dirsync.

We are actually planning to deploy RODCs in some of our remote sites on servers running 2008R2. This force us to rollback AD functionnal levels to 2008R2.

Do you think if doing so would cause problems with Office365/ADFS/DirSync beside loosing Workplace Join in ADFS?

Improve this question
2
  • Why not deploy Windows Server 2012 R2 RODC's in the remote sites?
    – joeqwerty
    Feb 5, 2015 at 16:06
  • That's what we do when replacing servers but there are +40 remote sites and we're willing to deploy RODC as fast as possible, thus i was considering as an option rolling back functionnal levels to achieve consistency faster among all of our remote sites.
    – Maxwell
    Feb 6, 2015 at 13:43

1 Answer 1

Reset to default
0

Workplace join (WPJ) does not require a specific forest functional level(FFL). It requires the correct schema extensions and subsequent AD containers only. So you wont lose WPJ by rolling back FFL. Similarly AD FS, Dirsync etc do not depend on a DFL/FFL.

Therefore, I have no reason to believe this DFL/FFL rollback would cause problems. But I have not tested this.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .