Free Essay

Ad Fsmo Role: Alternate Messages

In: Computers and Technology

Submitted By mhunter
Words 476
Pages 2
AD FSMO Role Management Research: Alternate Methods

A junior administrator has been tasked with documenting current FSMO role holders and GC Servers, as well as documenting procedures for responding to FSMO Role unavailability but, he addresses IT administrator with a few concerns: How to determine which DCs currently hold which roles and determine which DCs are Global Catalog Servers. He also needs to develop a plan for failure of a role holder.
Active Directory is a multimaster database which means that updates can be made by any writeable DC. Some sensitive operations need to be controlled more stringently than others, such as schema management and adding or removing additional domains from an AD forest. These specified roles are called Flexible Single Master Operations (FSMO). This means only one DC in the replica ring can provide a particular operation.
To find which roles a DC currently hold you can use the ntdsutil. From the start menu, key roles and press enter, key connections press enter, key connect to server and server name and domain press enter, key quit and press enter, key select operation target press enter, key list roles for connected server and press enter and quit. There are other ways to find which roles a DC currently holds, such as: * You must know the default settings. By default the first domain controller installed in the forest root domain is designated as a global catalog server. * Schema snap-in * AD Domains and Trusts snap-in * And for RID, PDC emulator and Infrastructure use AD users and configuration snap-in.
You will need to develop a plan in the event that a role holder fails. Here are some suggestions. * The Primary Domain Controller (PDC) and the Relative Identifier Master (RID) should be on the same DC if possible. The PDC role is mostly used of all FSMO roles and has the widest range of functions. * The Schema Master and Domain Naming Master should be on the same DC. * To provide fault tolerance there should be at least 2 DCs available within each domain of the forest. * The Infrastructure Master Role and the Global Catalog should not be serviced by the same Domain Controller, as the combination of these two roles on the same host will cause unexpected, potentially damaging behavior in a multi-domain environment.
You can also use Domain Controller Diagnostic Tool (dcdiag) to analyze the state of one or all DCs in a forest and check DNS errors. It can also help to check security for AD domain. You can troubleshoot domains with dcdiag.exe. If client computers can’t locate a DC or if domain controllers can’t replicate AD, you can run tests with dcdiag to look for a solution. Dcdiag checks critical DC functionality with test for connectivity, DNS AD replication, Sysvol replication and test that check the FSMO holders on the network.

Similar Documents

Free Essay

Nt1330 Unit 5 Exercise 1

...AD FSMO Role Management: Alternate Methods Dear Junior Admin. Well it seems you have a complicated decision on your mind “what tool for the job?” I have decided its best for you to decide on your own which tools you prefer to work with, although I can ease the pain of the decision by providing insight on each of the tools you have at your fingertips. DCDIAG – is a command line tool that analyzes the state of domain controllers in a forest and shows any problems to help with trouble shooting. There are many useful commands with this tool, much too many to include in this simple letter, but there are plenty of locations on line that provide the commands with descriptions for use. NTDSUTIL – is another command line tool that manages facilities for Active Directory Domain Services (AD DS) and the lightweight version (AD LDS). This tool can be used for database maintenance of AD DS, control and manage single master operations, and remove metadata left by domain controllers that had been improperly uninstalled. This tool has many commands that would cause this letter to become undesirably long so Google is your best bet to find them with descriptions. MMC Snap-ins – is a graphical interface that hosts administrative tools for managing your networks, special tools can be created here for administrative tasks. It basically allows you to build your own tools with the standard user interface. This tool will probably be your best bet to begin with, but don’t shy...

Words: 956 - Pages: 4

Premium Essay

Fsmo Role Ayer Nate Method

...OWA and NTLM for Outlook Anywhere and Autodiscover in Exchange 2007 » How to place FSMO and Global Catalog roles in Active Directory During installation of Active Directory on a Windows Server 2000/2003/2008 all FSMO roles will automatically be installed on the first server. But Best Practice dictates to move some of theese Flexible Single Master of Operation (FSMO) roles to seperate servers. If you only have one domain controller (not recommended), there is nothing to do since all roles must be on this server, but if you have multiple servers you should move some of theese roles on to more servers. It is also important to be aware of what servers are Global Catalog servers, especially if you have more than one domain and even if only one domain, they will be prefered by applications like Exchange server. It is recommended to place the forest roles on one Domain Controller (DC) and the domain roles on another server. If not all Domain Controllers are Global Catalog servers, it is also important to place the infrastructure master on a server that is NOT a Global Catalog server. Recommended Best Practice setup of FSMO roles. Domain Controller #1 Place the two forest roles on this server. * Schema Master * Domain Master Domain Controller #2 Place the domain roles on this server. * RID Master * Infrastructure Master * PDC Emulator If more domains exist in the forest, place the domain roles on a server in theese domains like Domain Controller #2 Global Catalog configuration...

Words: 10360 - Pages: 42

Free Essay

Active Dir

...Active Directory Design Guide Thursday, 25 February 2010 Version 2.0.0.0 Baseline Prepared by Microsoft Prepared by Microsoft Copyright This document and/or software (“this Content”) has been created in partnership with the National Health Service (NHS) in England. Intellectual Property Rights to this Content are jointly owned by Microsoft and the NHS in England, although both Microsoft and the NHS are entitled to independently exercise their rights of ownership. Microsoft acknowledges the contribution of the NHS in England through their Common User Interface programme to this Content. Readers are referred to www.cui.nhs.uk for further information on the NHS CUI Programme. All trademarks are the property of their respective companies. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. © Microsoft Corporation 2010. All rights reserved. Disclaimer At the time of writing this document, Web sites are referenced using active hyperlinks to the correct Web page. Due to the dynamic nature of Web sites, in time, these links may become invalid. Microsoft is not responsible for the content of external Internet sites. Page ii Active Directory – Design Guide Prepared by Microsoft, Version 2.0.0.0 Last modified on 26 February 2010 Prepared by Microsoft TABLE OF CONTENTS 1 2 Executive Summary ..............................................................................................

Words: 43732 - Pages: 175

Premium Essay

Monicah

...Windows Server® 2008 FOR DUMmIES ‰ by Ed Tittel and Justin Korelc Windows Server® 2008 For Dummies® Published by Wiley Publishing, Inc. 111 River Street Hoboken, NJ 07030-5774 www.wiley.com Copyright © 2008 by Wiley Publishing, Inc., Indianapolis, Indiana Published by Wiley Publishing, Inc., Indianapolis, Indiana Published simultaneously in Canada No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600. Requests to the Publisher for permission should be addressed to the Legal Department, Wiley Publishing, Inc., 10475 Crosspoint Blvd., Indianapolis, IN 46256, (317) 572-3447, fax (317) 572-4355, or online at http:// www.wiley.com/go/permissions. Trademarks: Wiley, the Wiley Publishing logo, For Dummies, the Dummies Man logo, A Reference for the Rest of Us!, The Dummies Way, Dummies Daily, The Fun and Easy Way, Dummies.com, and related trade dress are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates in the United States and other countries, and may not be used without written permission...

Words: 139691 - Pages: 559

Premium Essay

Server 2008 for Dummies

...Windows Server® 2008 FOR DUMmIES ‰ by Ed Tittel and Justin Korelc Windows Server® 2008 For Dummies® Published by Wiley Publishing, Inc. 111 River Street Hoboken, NJ 07030-5774 www.wiley.com Copyright © 2008 by Wiley Publishing, Inc., Indianapolis, Indiana Published by Wiley Publishing, Inc., Indianapolis, Indiana Published simultaneously in Canada No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600. Requests to the Publisher for permission should be addressed to the Legal Department, Wiley Publishing, Inc., 10475 Crosspoint Blvd., Indianapolis, IN 46256, (317) 572-3447, fax (317) 572-4355, or online at http:// www.wiley.com/go/permissions. Trademarks: Wiley, the Wiley Publishing logo, For Dummies, the Dummies Man logo, A Reference for the Rest of Us!, The Dummies Way, Dummies Daily, The Fun and Easy Way, Dummies.com, and related trade dress are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates in the United States and other countries, and may not be used without written permission...

Words: 139691 - Pages: 559