… and/or domain functional level?  There is a table on the following TechNet page that outlines this info.  It has been a re-occuring question in my recent trips!  Note that the domain functional level is the important factor for 2008, as that enables new features including fine grained password policy.