| Event Id | 16408 |
| Source | SAM |
| Description | Domain operation mode has been changed to Native Mode. The change cannot be reversed. |
| Event Information | According to Microsoft: 1. If the domain functional level is programmatically raised to 2 (Windows Server 2003) by directly modifying the value of the msdsBehaviorVersion attribute on the domainDNS object, or if the domain functional level is raised to 2 by using the Ldp.exe utility or the Adsiedit.msc utility, you do not have to change the domain mode to native mode before you raise the domain level. 2. In Windows Server 2003 Service Pack 1 (SP1), if the domain functional level is programmatically raised to 2 by directly modifying the value of the msdsBehaviorVersion attribute on the domainDNS object, or if the domain functional level is raised to 2 by using the Ldp.exe utility or the Adsiedit.msc utility, you must change the domain mode to native mode before you raise the domain level. If you do not change the domain mode to native mode before you raise the domain level in Windows Server 2003 SP1, the operation is not completed successfully. 3. Active Directory could not update the functional level of the following domain because the domain is in mixed mode.In this scenario, you can change the domain mode to native mode by using the Active Directory Users & Computers snap-in, by using the Active Directory Domains & Trusts UI MMC snap-in, or by programmatically changing the value of the ntMixedDomain attribute to 0 on the domainDNS object. When this process is used to raise the domain functional level to 2 (Windows Server 2003), the domain mode is automatically changed to native mode. 4. The transition from mixed mode to native mode changes the scope of the Schema Administrators and Enterprise Administrators security groups to universal groups. 5. When the Windows Server 2003 admin tools are used to invoke domain functional level, both the ntmixedmode and msdsBehaviorVersion attributes are modified in the correct order. However, if the msdsBehaviorVersion attribute that controls the domain functional mode is manually or programmatically set to 2 and |
| Reference Links | How to raise domain and forest functional levels in Windows Server 2003 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.