Domain Type Query


Wondering if someone could just explain something to me. I did a gpresult /r on a server and it gave me the below output.

GPO-Screenshot-1.pngNow there is the domain type of windows 2000.

The domain functional level is windows 2003
Should the GPResult be of type windows 2003?
Anyone know why I got the difference? are these related or unrelated items?

Phil PearceWindows System AdministratorAsked:
Who is Participating?
You can safely ignore the field. It has nothing to do with the DFL or FFL.

The "Domain Type" field was initially intended to distinguish between a legacy NT4 environment, with its concept of PDCs and BDCs, and the massively reworked Active Directory environment introduced with Windows 2000. Later versions of the tool might distinguish between 2008 and onward, but the differences there are less extreme than NT4 --> 2000 was.
Manikandan NarayanswamySecurity Specialist & IBM Security GuardiumCommented:

As long the policy is getting applied you don't need to worry about that you can ignore this no need to worry

GPRESULT is a bit buggy in this respect. For a 2012 domain it will say '2008 or later'. Better to check via the GUI tools.

Here's a good link that shows different ways to retrieve the info via command line with powershell or dsquery.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.