Created attachment 12627 [details] samba-tool level 10 debug log On my existing DC (provisioned with 4.1.11, constantly updated and currently runs 4.5.0), raising the domain level to 2012_R2 fails: # samba-tool domain level raise --domain-level=2012_R2 ERROR: Domain function level can't be higher than the lowest function level of a DC! Raising up to 2008_R2 works. 2012 and 2012_R2 fails. On this Samba AD I see: dn: DC=samdom,DC=example,DC=com msDS-Behavior-Version: 2 If I provision a new Samba AD with 4.5.0: dn: DC=samdom,DC=example,DC=com msDS-Behavior-Version: 4 Seems it has a new default, and it is not raised in existing Samba ADs if you update Samba. However, raising the level from default (2008_R2) fails here, too.
We simply don't support 2012* yet.