Skip to main content

FSMO Roles in Active Director


The Five FSMO Roles

  • Schema Master - A domain controller (DC) with this FSMO role controls all schema updates and modifications. There can only be one Schema Master in a forest. To update the schema of a forest, you must have access to the Schema Master domain controller.
  • Domain Naming Master - Controls the addition or removal of domains in the forest. This DC can also add or remove any cross-references to domains in external (Lightweight Directory Access Protocol) LDAP directories. there can only be one Domain Naming Master in a forest.
  • Infrastructure Master - Responsible for updating references from objects in the lodlcal domain to objects in other domains. There is one Infrastructure Master DC per domain.
  • Relative ID (RID) Master - Processes RID pool requests from all DCs in the local domain. These pool requests are a sequence of unique RID values. These RID values are the unique part of the Security Identifier (SID). There is one RID Master DC per domain.
  • PDC Emulator - Advertises itself as the PDC to workstations, member servers, and BDCs running Windows NT. Other jobs of this role include acting as the Domain Master Browser, handling Active Directory password changes, maintenance of trust relationships, and synchronizing time for servers and clients within a domain. There is one PDC Emulator per domain.
Labels:

Comments

Post a Comment

Popular posts from this blog

Installing Nagios 4 on Ubuntu 14 04 LTS

1 comment
Read more

AD-Powershell for Active Directory Administrators

http://social.technet.microsoft.com/wiki/contents/articles/5819.ad-powershell-for-active-directory-administrators.aspx Computer object commands List all computer accounts in a domain Get-ADComputer –Filter {Name –Like "*"} View all computers that are logged in for 90 days to the Active Directory Search-ADaccount -AccountInactive -Timespan 90 -ComputersOnly OR $lastLogon = (get-date).adddays(-90).ToFileTime() Get-ADComputer -filter {lastLogonTimestamp -gt $lastLogon}  Find and delete all disabled Computer accounts in Active Directory Search-ADAccount -AccountDisabled -ComputersOnly | Sort-Object | Remove-ADComputer Find and delete disabled computer accounts from a specific OU Search-ADAccount -AccountDisabled -Searchbase "OU=IT,DC=Contoso,DC=Com" -ComputersOnly | Sort-Object | Remove-ADComputer Find and delete all computer accounts that no longer have signed up since 11/20/2011 to the Active Directory Search-ADAccount -AccountInactive -DateTime "20.11.2011...
Post a Comment
Read more

Installing the East-Asian language packs

Windows XP SP3 Info 1. Go to Start > Control Panel > Regional & Language Options (or Date, Time, Language and Regional Options) > Languages. 2. Check the box for Install files for East Asian Languages > Click OK and let the process run and then you will have to Restart your PC. Alternatively, you may need to install the East Asian Language pack that is on your original Windows disc. Outlined below is a step-by-step guide to installing it in your computer (for Windows XP - Vista users might have to undergo different steps, but they should still be similar). Try it and see if it works for you: 1. Insert your Windows XP CD 2. Go to Control Panel 3. Go to Regional and Language Options 4. Click on the Languages Tab 5. Click on the Install files for East Asian Languages checkbox and make sure that it's checked. 6. Click on the OK button for the dialog box that appears. 7. Click on the OK button of the window to close it, and begin the installation. ...
1 comment
Read more