Created attachment 9556 [details]
Screenshot of Message and Domain Admin Group Membership properties

When you try to raise the domain or forest functional level from Windows (tried on W7 64-Bit) with "AD Domains and Trusts", the dialogs say "Not sufficiant privileges to raise the forest functional level" respectively "domain functional level"


The MS Documentation (http://technet.microsoft.com/en-us/library/cc730985.aspx) says, the Account has to be member of the Enterprise Admins group, what the Domain Admin, I've used, is. See attached Screenshot.



With samba-tool it's no problem to raise the levels:
# samba-tool domain level raise --domain-level=2008
Domain function level changed!
All changes applied successfully!

# samba-tool domain level raise --forest-level=2008
Forest function level changed!
All changes applied successfully!