Flexible Single Master Operations (FSMO)

Flexible Single Master Operations (FSMO)

• Certain roles / jobs that can't have multiple writeable copies (conflicts)
• Every D.C has a read only copy of all roles, for recovery
• Seizing converts a read only copy of one of the above roles to a writeable copy
• 5 FSMOs
  • Forest level (these will generally live in the root)
    • Domain Naming Master - Config. Partition of AD - Trust Relationships, Unique Domain Names
    • Schema Master - Master copy of schema database (must be registered)
      
  • Domain Level (read only copy lives on every D.C.) - can be recovered via transfer and seizing
    • RID Master - Ensures unique identifiers for every object in domain
    • Infrastructure master - allocates groups/resources across different domains
    • PDC Emulator Master - Passwords, time, GPO replication across domains