FSMO Roles – Flexible Single Master Operation is the main features of windows Active Directory server. Generally AD is a multi master distributed database and these roles are used to reduce conflict and facilitate communication concerning replication between domain controllers
FSMO Roles are used for performing certain critical operations and it has to be performed very carefully, since tiny changes in these roles will result in the major issues of the active directory environment.
Generally FSMO roles are classified as 2 categories.
- Forest Wide Roles
- Domain Wide Roles
Since the operations are performed on Forest basis and domain basis these classifications has been made for the better understanding.
The detailed information about FSMO roles are as follows.
There are 5 FSMO roles in an Active Directory since the operations performed on forest level are classified as Forest Wide Roles and Domain based are Domain wide roles.
Forest Wide Roles:
These roles are applicable at the Forest level
- Schema Master
- Domain Naming Master
Domain Wide Roles:
These roles are applicable at the Domain level
- RID Master
- PDC Emulator
- Infrastructure Master
FSMO roles are one of the important interview questions for the Techies and I have seen in so many forums about the same, hence this topic is for the beginners.
By default all roles are assigned to first domain controller.
- The schema master domain controller controls all the access related to updates and modifications to the schema.
- For the Entire Forest there can be only one Schema Master.
- Ensures updates are replicated to all the Domain Controller in the forest.
- In order to make changes or Updates on the schema level you must have access to the schema and you must be member of Schema Administrators Group.
- By default, the first server in the forest has Schema Master Role
Domain Naming Master:
- Domain Naming Master allows the additions or removals of Domains in the Forest
- For the Entire Forest there can be only one Domain Naming Master
- In order to make changes or Updates on the Domain Naming Master you must be member of Enterprise Administrators Group.
- By default, the first server in the forest has the domain naming master role
Relative Identifier Master:
- The RID master is responsible for processing RID pool requests from all domain controllers in a particular domain.
- The RID Master manages the Security Identifier (SID) for every object within the particular domain
- Whenever a domain controller creates a new, user, group, organization Unit (OU) or computer object, it assigns the object a unique security ID (SID)
- By default, the first server in the domain is the RID Operations Master
- In order to change or move the RID Master role to another Server, you must be a member of Domain Administrators Group
- The key role of PDC Emulator is act as a central manager for password Changes. It processes password changes from clients and replicates updates to the BDCs
- It also acts a central manager for Replication and Account Lockouts.
- Handles time synchronization
- At any time, there can be only one domain controller acting as the PDC emulator master in each domain in the forest.
- By default, the first server in the domain has PDC Emulator Master Role.
- In order to change or move the PDC Emulator role to another Server, you must be a member of Domain Administrators Group
Infrastructure Master Role:
- The infrastructure master compares its data with that of a global catalog
- Manages users and group references for objects between domains
- It Queries the global catalog server to ensure that references are current and updated.
- There is one infrastructure operations master in every domain in a forest.
- By default, it is placed in the first domain controller in the domain.
- In order to change or move the Infrastructure Master role to another Server, you must be a member of Domain Administrators Group.
Now will see about, How to find out which server has FSMO Roles
There are four ways to identify the FSMO roles, but here I am using the easy and cool one and that too using single command.
Will see about the detailed information about FSMO roles and How to Transfer FSMO roles in the upcoming Topics.
Click on the Image or Below Link to Read the Complete Article:
Hope this Tutorial helps you Guys.. !! if this Article found useful Don’t Forget to Like..!!! Share ..!!! Comment ..!!