Monday 21 October 2013

Flexibility Schema Operations Master (FSMO) Roles in 2008 Server

As we are all aware that certain tasks needs to be performed by single one, so as far AD 2008 goes some tasks are performed by single domain controller and they jointly called as FSMO roles.
There are five roles:
They are further classified in two

1. Forest Roles

  • Schema Master - As name suggests, the changes that are made while creation of any object in AD or changes in attributes will be made by single domain controller and then it will be replicated to another domain controllers that are present in your environment. There is no corruption of AD schema if all the domain controllers try to make changes. This is one of the very important roles in FSMO roles infrastructure.
  • Domain Naming Master - This role is not used very often, only when you add/remove any domain controllers. This role ensures that there is a unique name of domain controllers in environment.

2. Domain Roles

  • Infrastructure Master - This role checks domain for changes to any objects. If any changes are found then it will replicate to another domain controller.
  • RID Master - This role is responsible for making sure each security principle has a different identifier.
  • PDC emulator - This role is responsible for Account policies such as client password changes and time synchronization in the domain