|
So are these FSMO roles stored in some sort of configuration partition in AD? if not, where are they stored? I plan to replace my DC hardware next year, as long as I bring the new server up with the same IP/Name etc configuration etc, I won't need to move the FSMO roles to another DC when I replace the hardware? Sorry if these seems junior questions, this is my first job in IT (i'm doing this for free for experience) thank you for your help, Amy ;o)
"Almeida Pinto, Jorge de" <jorge.de.almeida.pinto@xxxxxxxxxxxxx> wrote:
First, look at
each role and see what it does...
Forest FSMOs * Schema Master --> needed when updating the schema * Domain Naming master --> needed when adding or removing domains within the forest <
SPAN class=442525215-29112005>Domain
FSMOs * PDC Emulator --> needed for legacy clients (NT4, W9x) when changing passwords, used for time sync, is used for pwd checking when a user enters an incorrect pwd at another DC, used by DFS roots to get DFS info * RID Master --> needed to distribute RID pools to DCs that have exhausted their current RID pool for 50% (=250 RIDs) * Infrastructure --> needed to update references between domains in a forest (does not do anything in a single domain forest) If you look at this, there is no need to first transfer the FSMO roles to another DC, just to carry out maintenance activities. It also depends on the FSMO role. The most used ones in your case will be the RID and the PDC FSMO. Only if you create more than 500 security principals (users, groups and computers) during the moment that the DC with the RID FSMO is down, you will experience a problem on the DC that is left. If you still have legacy clients and they want to change the password that will not be possible. And if those clients have the DSClient installed that will not be an issue either. In short: leave as is. it will be OK for those 2 hours Cheers, jorge | 