Flexible Single Master Operations (FSMO)
Flexible Single Master Operations (FSMO)
- Certain roles / jobs that can't have multiple writeable copies (conflicts)
- 5 FSMOs
- Forest level (these will generally live in the root) - AD Domains and Trusts > Operation master
- Domain Naming Master - Config. Partition of AD - Trust Relationships, Unique Domain Names
- Schema Master - Master copy of schema database (must be registered)
- Run > regsvr32 schmmgmt.dll > MMC > add/remove snap-in > ad schema > add > OK
- Domain Level (read only copy lives on every D.C.) - can be recovered via transfer and seizing* - Located in AD > Right click domain > operations master
- RID Master - Ensures unique identifiers for every object in domain
- Infrastructure master - allocates groups/resources across different domains
- PDC Emulator Master - Passwords, time, GPO replication across domains
- Forest level (these will generally live in the root) - AD Domains and Trusts > Operation master
*To seize roles:
- CMD > ntdsutil
- Powershell > Move-ADDirectoryServerOperatioonMasterRole -identity SVR -OperationMasterRole