Flexible Single Master Operation_(FSMO) Role
----------------------------------------------
Global Catalog Server: Consists of information directly objects. With this system admins and users can easily find the directory information, no matter which domain it is contained within. For example; user names, contacts and so on.
Note:- "Global catalog manage all the roles and responsbility via FSMO role"
Forest Based FSMO Role:-
------------------------
- Schema Master Role
- Domain Naming Master Role
Domain Based FSMO Role:-
------------------------
- RID Master Role
- PDC Emulator
- Infrastructure Master Role
Schema Master Role:- This role is responsible to update another tree in forest. If any tree or forest add or remove in a forest.
Domain Naming Master Role:- This role is responsible that same name of another tree is not available in forest. It's show the error message if any same name of tree found in forest.
RID Master Role:- If you create any object in a domain such as user,group etc. Then DC asign unique SID(Security Identifier). This is the function of RID master role.
PDC Emulator:- If change password of any object in domain controller, then PDC update this information to all client or DC machine. Sync clock to DC or client. It mean change time or date in all client that time set in DC.
Infrastructure Master Role:- Share one DC information to another DC or one forest information to another forest.
LAB_Infrastructure
------------------
Step-1(Server_2016)
-------------------
- Go to Server 2016.
- You must change the server name. In my case server name is "server2016".
- Now you must create ADDS in server 2016 machine. In my case domain is "server2016.act.local" .
- You must create OU with user in server 2016 thereafter go to domain controller and you will see only one server "server2016".
Step-2(Server_2019)
-------------------
- Go to Server 2019.
- You must change the server name. In my case server name is "server2019".
- Now you must install the role of "ADDS" in server 2019 machine.
- You must configure server 2019 such as "Additional Domain Controller(ADC)".
- After complete it you must check the OU that is created in server 2016 and you will see that. Thereafter you must go to domain controller and you will see both server.
Step-3(Server_2016)
--------------------
You must create OU_(IT-Department) & create a User_(User-1) in OU.
In a domain controller you will see only Server 2016 before configuring the ADC & after configuration of ADC you will see both server.
Now go to tools—Active Directory Sites and Services—Sites—Default First Site Name—Servers—Server2019—Right click on NTDS Settings—All tasks—Check Replication Topology.
No comments:
Post a Comment