FSMO and AD specific roles

Topics: Active Directory, Flexible single master operation, Domain controller Pages: 2 (415 words) Published: October 11, 2013


The general concept of Flexible Single Master Operations (FSMO) roles working closely together with Active Directory (AD) using five specific server roles. When it comes to installing Active Directory Domain Services it creates a forest which holds all the FSMO’s roles for each new domain that you add to active directory. FSMO roles have been implemented to perform a job that avoids corruption due to conflicting simultaneous changes; they are performed by one specific server that prevents database corruption. These five specific server roles are divided between domain-wide and forest-wide operations. There are three roles that are domain specific these include, Relative Identifier (RID) Master, Infrastructure Master, and Primary Domain Controller (PDC) Emulator. The RID has a responsibility of creating a team of identifiers used when new accounts, groups, and computers are created. This is a part of security identifiers (SID) which is used to identify an object throughout the domain. The Infrastructure Master is accountable for replicated changes to an object’s SID or distinguished name (DN). Infrastructure Master and global catalog work closely together but are not serviced on the same domain controller due to the fact that if they were on the same domain controller it would be difficult to know the other information has changed. Last one on the list the Primary Domain Controller Emulator (PDC) is held accountable for managing time synchronization within a domain edits to Group Policy Objects (GPO), and replication of security-sensitive account events, such as password changes and account lockouts. The forest-wide FSMO roles provide a function which is unique in all domains; they keep track of adding and removing domain names and manage changes to the AD schema. In the AD the forest-wide authorities are Domain Naming Master (DMN) and Schema Master (SM). When creating a new domain the DM assures the name has never been used. Lastly, the SM role takes...
Continue Reading

Please join StudyMode to read the full document

You May Also Find These Documents Helpful

  • AD FSMO Role Research Essay
  • Four Specific Roles of an Artist Essay
  • Specific Population and the Advocate Role Essay
  • Specific Population and the Advocate Role Essay
  • Recruitment and Specific Job Role Essay
  • Ad Marketing- Gender Roles Essay
  • roles Essay
  • Specific Population and Advocate Role Essay

Become a StudyMode Member

Sign Up - It's Free