Re: FSMO Role Placement - 2 DC's.

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Anand Dusi [MSFT] (adusi_at_online.microsoft.com)
Date: 05/25/04


Date: Tue, 25 May 2004 11:26:36 GMT

hello ,

considering that you have 2 DC's following are the recommendations for placement of the FSMO roles .. ,

**
Place the RID and PDC emulator roles on the same domain controller. Good communication from the PDC to the
RID master is desirable as downlevel clients and applications target the PDC, making it a large consumer of
RIDs. It is also easier to keep track of FSMO roles if you cluster them on fewer machines.

If the load on the primary FSMO load justifies a move, place the RID and Pdomain controller emulator roles on
separate domain controllers in the same domain and active directory site that are direct replication partners of
each other.
As a general rule, the infrastructure master should be located on a nonglobal catalog server that has a direct
connection object to some global catalog in the forest, preferably in the same Active Directory site. Because
the global catalog server holds a partial replica of every object in the forest, the infrastructure master, if placed
on a global catalog server, will never update anything, because it does not contain any references to objects
that it does not hold. Two exceptions to the "do not place the infrastructure master on a global catalog server"
rule are:
Single domain forest:

In a forest that contains a single Active Directory domain, there are no phantoms, and so the infrastructure
master has no work to do. The infrastructure master may be placed on any domain controller in the domain.
Multidomain forest where every domain controller holds the global catalog:

If every domain controller in the domain also hosts the global catalog, then there are no phantoms or work for
the infrastructure master to do. The infrastructure master may be placed on any domain controller in the
domain.
At the forest level, the schema master and domain naming master roles should be placed on the same domain
controller as they are rarely used and should be tightly controlled. Additionally, the domain naming master
FSMO should also be a global catalog server.

you can also refer to the following links for more information on the FSMO positioning ..

http://support.microsoft.com/default.aspx?
scid=http://support.microsoft.com:80/support/kb/articles/Q223/3/46.ASP&NoWebContent=1

http://support.microsoft.com/default.aspx?
scid=http://support.microsoft.com:80/support/kb/articles/Q197/1/32.ASP&NoWebContent=1

Anand Dusi

The Posting is provided "AS IS" with no warranties, and confers no rights.



Relevant Pages

  • RE: Provide feedback to DC promotion/replacement
    ... When I promote my dc3 to a domain controller, the first step is to enable GC ... the infrastructure master is also a global catalog it won't ever see any ... -the Infrastructure Master is not allowed to run on a Global Catalog Server ...
    (microsoft.public.windows.server.active_directory)
  • RE: Provide feedback to DC promotion/replacement
    ... step as a single domain controller in a domain. ... I have looked at the WINS property on that server and nothing is pointing to ... A global catalog server is a domain controller that, ... the infrastructure master is also a global catalog it won't ever see any ...
    (microsoft.public.windows.server.active_directory)
  • Re: 2003 Domain Controller Question
    ... Domain Controller will transfer any current FSMO roles off to another Domain ... What about the "Infrastructure Master" and the "Global ... >> global catalog server. ... >> The Global Catalog Server maintains an Active Directory global ...
    (microsoft.public.win2000.active_directory)
  • Re: 2003 Domain Controller Question
    ... Domain Controller will transfer any current FSMO roles off to another Domain ... What about the "Infrastructure Master" and the "Global ... >> global catalog server. ... >> The Global Catalog Server maintains an Active Directory global ...
    (microsoft.public.windows.server.general)
  • Re: 2003 Domain Controller Question
    ... Domain Controller will transfer any current FSMO roles off to another Domain ... What about the "Infrastructure Master" and the "Global ... >> global catalog server. ... >> The Global Catalog Server maintains an Active Directory global ...
    (microsoft.public.windows.server.active_directory)