操作主機(Operation Master)或 FSMO(Flexible Single Master Operation)Role

樹系等級(Forest Level)
  • Schema Master(架構主機),最好與 Domain Naming Master 在同一台 DC 上。
  • Domain Naming Master(網域命名主機),必須同時是 GC,最好與 Schema Master 在同一台 DC 上。

網域等級(Domain Level)
  • PDC Emulator(主網域控制站(PDC)競爭者),最好與 RID Master 在同一台 DC 上。
  • RID Master(相對 ID 主機),最好與 PDC Emulator 在同一台 DC 上。
  • Infrastructure Master(基礎建設主機),不可同時是 GC,除非:
      * Single Domain Forest
      * Multidomain Forest where every DC holds the GC
      * Infrastructure Master has no work to do


辨別 DC 扮演那些操作主機角色
  • GUI Tools
      AD Users and Computers:PDC Emulator, RID Master, Infrastructure Master。
      AD Domains and Trusts:Domain Naming Master。
      AD Schema:Schema Master。
  • NTDSUTIL Command-Line Tool
      C:> ntdsutil
      ntdsutil: domain management
      domain management: connections
      server connections: connect to server ServerName
      server connections: quit
      domain management: select operation target
      select operation target: list roles for connected server
  • DCdiag Command-Line Tool
      DCdiag /test:Knowsofroleholders /v
  • NETDOM query FSMO Command-Line Tool
  • Dumpfsmos.cmd,file of Windows 2000 Server Resource Kits。
  • AD Replication Monitor
      Monitored Servers \ SiteName \ ServerName \ Properties \ FSMO Roles
  • Script files,Using ADSI and WSH,參見 KB235617。


操作主機角色的轉移(Transferring an Operation Master Role)
  • GUI Tools
      AD Users and Computers:PDC Emulator, RID Master, Infrastructure Master。
      AD Domains and Trusts:Domain Naming Master。
      AD Schema:Schema Master。
  • NTDSUTIL Command-Line Tool
      C:> ntdsutil
      ntdsutil: roles
      FSMO maintenance: connections
      server connections: connect to server ServerName
      server connections: quit
      FSMO maintenance:
        Transfer RID master
        Transfer PDC
        Transfer infrastructure master
        Transfer domain naming master
        Transfer schema master
      FSMO maintenance: quit
      ntdsutil: quit
  • Script file,Using VB script or WSH。


操作主機角色的奪取(Seizing an Operation Master role)
  • NTDSUTIL Command-Line Tool
      C:> ntdsutil
      ntdsutil: roles
      FSMO maintenance: connections
      server connections: connect to server ServerName
      server connections: quit
      FSMO maintenance:
        Seize RID master
        Seize PDC
        Seize infrastructure master
        Seize domain naming master
        Seize schema master
      FSMO maintenance: quit
      ntdsutil: quit


參考資料