Does raising domain functional level DFL have any impact on application using AD DS? Current DFL is Windows 2003 and we are planning to raise it to Windows 2008. Does this have any impact on sites hosted in IIS using Active Directory domain services? (Doesn't have a complete idea of all the sites whether they are using these active directory domain services or not 😟!)


All kerberos tokens will be invalidated and need to be re-requested. This is due to both passwords for the krbtgt account is changed to enable support for the newer encryption types. For a vanilla workstation, there is usually no impact. For applications such as Exchange/SQL, it may be necessary to restart services or even the servers.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.