FSMO Roles in Active Directory

Views:
 
     
 

Presentation Description

No description available.

Comments

By: babul9326 (11 month(s) ago)

hi pls send me this PPT to babul9326@gmail.com, Thanx in advance

By: deep.tech87 (13 month(s) ago)

cool ppt ....awsom e

By: sarancaps (14 month(s) ago)

Hi please send me this PPT to sarancaps@gmail.com thanks in advance.

By: DineshThangamuthu (18 month(s) ago)

Its been nice to read and its easy to understand...

By: malang2 (20 month(s) ago)

Hi Brother, I have to prepare test for server 2003, plz send me following ppts, what is active directory, Group policy, domain, fsmo roles, ISA server, Exchange Server etc. also send me related material which helps me for intervie thanks. my id is ' home_0466@yahoo.com ' krishma malang

See all

Presentation Transcript

Operations Master / FSMO Roles in Active Directory : 

Operations Master / FSMO Roles in Active Directory Prepared By:- Sunil Kumar

Introduction : 

Introduction Active Directory supports multimaster replication of the directory data store between all domain controllers in the domain, so all domain controllers in a domain are essentially peers. However, some changes are impractical to perform in using multimaster replication, so, for each of these types of changes, one domain controller, called the operations master, accepts requests for such changes. In every forest, there are at least five operations master roles that are assigned to one or more domain controllers. Forest-wide operations master roles must appear only once in every forest. Domain-wide operations master roles must appear once in every domain in the forest. The operations master roles are sometimes called flexible single master operations (FSMO) roles.

Forest-wide operations master roles : 

Forest-wide operations master roles Every forest must have the following roles: Schema Master Domain Naming Master Note : These roles must be unique in the forest. This means that throughout the entire forest there can be only one schema master and one domain naming master.

Domain-wide Operations Master Roles : 

Domain-wide Operations Master Roles Every domain in the forest must have the following roles: Relative Identifier (RID) Master Primary Domain Controller (PDC) Emulator Master Infrastructure Master Note: These roles must be unique in each domain. This means that each domain in the forest can have only one RID master, PDC emulator master, and infrastructure master.

Schema Master : 

Schema Master The Schema Master domain controller controls all updates and modifications to the schema. To update the schema of a forest, you must have access to the schema master. There can be only one schema master in the entire forest. Few things to remember about the Schema Operations Master: There is only one Schema Master in entire forest. By default, the first server in the forest has Schema Master Role. In order to change or move the Schema Master role to another Server, you must be a member of Schema Administrators Group.

Domain Naming Master : 

Domain Naming Master The domain controller holding the domain naming master role controls the addition or removal of domains in the forest. There can be only one domain naming master in the entire forest. Few things to remember about domain naming master:- There is only one domain naming master in entire forest. By default, the first server in the forest has the domain naming master role. In order to change or move the Domain Naming Master role to another Server, you must be a member of Enterprise Administrators Group. Unlike a domain naming master in a forest set to the Windows 2000 functional level, a domain naming master in a forest set to the Windows Server 2003 functional level is not required to be enabled as a Global Catalog Server.

Relative Identifier (RID) Master : 

Relative Identifier (RID) Master The RID master allocates sequences of relative IDs (RIDs) to each of the various domain controllers in its domain. At any time, there can be only one domain controller acting as the RID master in each domain in the forest. Whenever a domain controller creates a user, group, or computer object, it assigns the object a unique security ID (SID). The SID consists of a domain SID, which is the same for all SIDs created in the domain, and a RID, which is unique for each SID created in the domain. Few things to remember about RID master:- There is only one RID Master role in every domain in the forest By default, the first server in the domain is the RID Operations Master. In order to change or move the RID Master role to another Server, you must be a member of Domain Administrators Group

Primary Domain Controller (PDC) Emulator Master : 

Primary Domain Controller (PDC) Emulator Master If the domain contains computers operating without Windows 2000 or Windows XP Professional client software or if it contains Windows NT backup domain controllers (BDCs), the PDC emulator master acts as a Windows NT primary domain controller. It processes password changes from clients and replicates updates to the BDCs. At any time, there can be only one domain controller acting as the PDC emulator master in each domain in the forest. By default, the PDC emulator master is also responsible for synchronizing the time on all domain controllers throughout the domain. Few things to remember about PDC Emulator master:- There is only one PDC Emulator per domain By default, the first server in the domain has PDC Emulator Master role. In order to change or move the PDC Emulator role to another Server, you must be a member of Domain Administrators Group

Infrastructure Master : 

Infrastructure Master The infrastructure master is responsible for updating references from objects in its domain to objects in other domains. The infrastructure master compares its data with that of a global catalog. Global catalogs receive regular updates for objects in all domains through replication, so the global catalog data will always be up to date. If the infrastructure master finds data that is out of date, it requests the updated data from a global catalog. The infrastructure master then replicates that updated data to the other domain controllers in the domain. Note : Unless there is only one domain controller in the domain, the infrastructure master role should not be assigned to the domain controller that is hosting the global catalog. If the infrastructure master and global catalog are on the same domain controller, the infrastructure master will not function. The infrastructure master will never find data that is out of date, so it will never replicate any changes to the other domain controllers in the domain.

Infrastructure Master : 

Infrastructure Master Few things to remember about Infrastructure Operations master:- There is one infrastructure operations master in every domain in a forest. By default, it is placed in the first domain controller in the domain. In order to change or move the Infrastructure Master role to another Server, you must be a member of Domain Administrators Group