IT Knowलेge: MCSA FSMO Roles Transfer

Friday, 16 August 2019

MCSA FSMO Roles Transfer

MCSA FSMO roles transfer

FSMO ROLES

Flexible Single Master Operation Roles are hosted by a Domain Controller. Operation Master roles defines some responsibilities related to domain management. FSMO roles are two type ---

Forest wide roles- Forest wide roles are hosted by Primary Domain Controller which can control activities of entire forest. Only one server can store forest wide role in entire forest. Two forest wide roles are-

1- Schema Master

2- Domain Naming Master

Domain wide roles- Domain wide roles are stored on Domain controllers . Only one domain can has domain wide roles in a Domain. If multiple domains are in a forest . All domain Controllers have domain wide roles. Three Domain wide roles are-

1- Relative ID (RID)

2- Primary Domain Controller Emulator ( PDC )

3- Infrastructure Master Role.

Roles distribution in a Forest---

DC- It has all five roles forest wide and domain wide both.

ADC- It does not has any roles by default but when we need, When we want to give some responsibility to ADC , We can transfer roles to ADC.

RODC- It also doesn't has any roles like ADC. There is a little different between ADC and RODC. ADC allows to read and write any object of domain but RODC does not allow to write or modify any object . It only allows to read .

CDC- Child Domain Controller creates a new domain in a forest , So it stores domain wide roles (3)

Tree- A new tree also creates a new domain in a forest So tree also stores domain wide roles (3)

We can transfer or seize Roles from DC to ADC.

Follow these commands to seize roles from DC to ADC-

>> Go to ADC Server and open CMD-

>> ntdsutil