I have my windows server active directory with my WS2003 R2 SP2 and extended the scheme so bitlocker can support the keys in the DA, this is accomplished well, but when I install MBAM (Microsoft Bitlocker and Monitoring) on Windows Server 2008R2 to save in the same DA, 2003 will not let me this configuration is supported? MBAM can manage the keys stored in a DA with functional level 2003?

Hello, BitLocker does not impose any requirements on domain or forest functional levels. However, domain controllers running operating systems earlier than Windows Server 2003 with SP1 should be removed from mixed-functional-level environments (or upgraded), because backed up BitLocker and TPM information will not be protected on those domain controllers. Do you have another Domain Controller running operating system earlier than Windows Server 2003 SP1? If so, either upgrade it or remove it from the domain. Thanks Zhang

Hello, BitLocker does not impose any requirements on domain or forest functional levels. However, domain controllers running operating systems earlier than Windows Server 2003 with SP1 should be removed from mixed-functional-level environments (or upgraded), because backed up BitLocker and TPM information will not be protected on those domain controllers. Do you have another Domain Controller running operating system earlier than Windows Server 2003 SP1? If so, either upgrade it or remove it from the domain. Thanks Zhang