FSMO Roles and Global Catalog Servers 2.2 Plan Active Directory FSMO Roles and Global Catalog Servers TestOut Server Pro 2016: Identity
Section Skill Overview Enable Universal Group Membership Caching. TestOut Server Pro 2016: Identity
Key Terms Universal Group Membership Caching (UGMC) TestOut Server Pro 2016: Identity
Key Definitions User Datagram Protocol (UDP): UDP is an alternative communications protocol to Transmission Control Protocol (TCP) used primarily for establishing low-latency and loss- tolerating connections between applications on the internet. TestOut Server Pro 2016: Identity
Key Definitions Universal Group Membership Caching (UGMC): Universal Group Membership Caching caches the group membership of universal groups. During logon, universal group membership is checked for the user. TestOut Server Pro 2016: Identity
FSMO Roles Flexible Single Master Operations TestOut Server Pro 2016: Identity
FSMO Roles and Global Catalog Servers Forest-Wide Domain-Wide Domain Naming Master Schema Master RID Master Infrastructure Master PDC Emulator Only one of each per forest Only one of each per domain TestOut Server Pro 2016: Identity
Schema Master Only one per forest. The only read/write copy. A template for Active Directory. Changes affect all existing and future Active Directory objects. Can only be edited by members of the Schema Admins group. TestOut Server Pro 2016: Identity
Domain Naming Master Ensures each domain in the forest has a unique name. Only one per forest. TestOut Server Pro 2016: Identity
RID Master Distributes RIDs to domain controllers. RIDs: Are unique numbers used to generate unique SIDs. Are never re-used. Are distributed in blocks of 500. Must be running to promote a server. TestOut Server Pro 2016: Identity
Infrastructure Master Infrastructure Master updates the Global Catalog. Do not install on Global Catalog server unless there is only one domain controller in the domain. TestOut Server Pro 2016: Identity
PDC Emulator Provides integration with Windows NT 4.0 domains NT 4.0 domains are no longer supported. Is preferred for security updates Password resets Account lockouts Provides synchronization and consistency Such as: Group Policy updates Distributed file system (DFS) replication Time synchronization TestOut Server Pro 2016: Identity
Global Catalog Servers Provides faster searching in forests. Provides a searchable catalog of all objects in every domain. Retrieves the Universal Group Membership from AD during logon. Work best when there is one in each site. Otherwise, enable Universal Group Membership Caching on the domain controllers at the site. Eliminates the dependency on the availability of a global catalog server during logons. Resolves logon requests locally from cached information. TestOut Server Pro 2016: Identity
Summary Domain RID Master Infrastructure Master PDC Emulator Global Catalog Servers TestOut Server Pro 2016: Identity
Operations Master Roles Management Facts TestOut Server Pro 2016: Identity
In-Class Practice Do the following labs: 2.2.11 Enable Universal Group Membership Caching TestOut Server Pro 2016: Identity
Class Discussion What is the difference between transferring a role and seizing a role? TestOut Server Pro 2016: Identity