Beginning with OES 2015 SP1 May 2017 Hot Patch, DSfW supports update of schema and domain to AD 2012 level. This also supports AES Encryption and Fine-grained password policies. For more information, see Section 23.0, Upgrading DSfW Environment to AD 2012 Level.