search for: d7422d35

UNOFFICIAL Thanks Tim, I was just wondering if my mistake was raising the functional-level. This confirms it. This apparently also broke backup. I cannot create the container, because the current schema (2003) doesn't support msDS-PasswordSettingsContainer. It seems impossible (and dangerous) to update the schema. I was given a reference to a thread about updating the schema but - the

...39;t support going backwards. However, the functional-level is just an integer in the database (msDS-Behavior-Version) that you can modify. The functional-level value for 2003 is '2' - you can see the possible values here: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/d7422d35-448a-451a-8846-6a7def0044df There are several objects that have this attribute. E.g. ldbsearch -H st/ad_dc/private/sam.ldb? '(msDS-Behavior-Version=*)' msDS-Behavior-Version --cross-ncs # record 1 dn: CN=ADDOMAIN,CN=Partitions,CN=Configuration,DC=addom,DC=samba,DC=example,DC=com msDS-Behav...