Articles about FSMO & GC

[Schnaufer]

操作主機（Operation Master）或 FSMO（Flexible Single Master Operation）Role

樹系等級（Forest Level）

• Schema Master（架構主機），最好與 Domain Naming Master 在同一台 DC 上。
• Domain Naming Master（網域命名主機），必須同時是 GC，最好與 Schema Master 在同一台 DC 上。

網域等級（Domain Level）

• PDC Emulator（主網域控制站（PDC）競爭者），最好與 RID Master 在同一台 DC 上。
• RID Master（相對 ID 主機），最好與 PDC Emulator 在同一台 DC 上。
• Infrastructure Master（基礎建設主機），不可同時是 GC，除非：
  　　* Single Domain Forest
  　　* Multidomain Forest where every DC holds the GC
  　　* Infrastructure Master has no work to do

辨別 DC 扮演那些操作主機角色

• GUI Tools
  　　AD Users and Computers：PDC Emulator, RID Master, Infrastructure Master。
  　　AD Domains and Trusts：Domain Naming Master。
  　　AD Schema：Schema Master。
• NTDSUTIL Command-Line Tool
  　　C:> ntdsutil
  　　ntdsutil: domain management
  　　domain management: connections
  　　server connections: connect to server ServerName
  　　server connections: quit
  　　domain management: select operation target
  　　select operation target: list roles for connected server
• DCdiag Command-Line Tool
  　　DCdiag /test:Knowsofroleholders /v
• NETDOM query FSMO Command-Line Tool
• Dumpfsmos.cmd，file of Windows 2000 Server Resource Kits。
• AD Replication Monitor
  　　Monitored Servers \ SiteName \ ServerName \ Properties \ FSMO Roles
• Script files，Using ADSI and WSH，參見 KB235617。

操作主機角色的轉移（Transferring an Operation Master Role）

• GUI Tools
  　　AD Users and Computers：PDC Emulator, RID Master, Infrastructure Master。
  　　AD Domains and Trusts：Domain Naming Master。
  　　AD Schema：Schema Master。
• NTDSUTIL Command-Line Tool
  　　C:> ntdsutil
  　　ntdsutil: roles
  　　FSMO maintenance: connections
  　　server connections: connect to server ServerName
  　　server connections: quit
  　　FSMO maintenance:
  　　　　Transfer RID master
  　　　　Transfer PDC
  　　　　Transfer infrastructure master
  　　　　Transfer domain naming master
  　　　　Transfer schema master
  　　FSMO maintenance: quit
  　　ntdsutil: quit
• Script file，Using VB script or WSH。

操作主機角色的奪取（Seizing an Operation Master role）

• NTDSUTIL Command-Line Tool
  　　C:> ntdsutil
  　　ntdsutil: roles
  　　FSMO maintenance: connections
  　　server connections: connect to server ServerName
  　　server connections: quit
  　　FSMO maintenance:
  　　　　Seize RID master
  　　　　Seize PDC
  　　　　Seize infrastructure master
  　　　　Seize domain naming master
  　　　　Seize schema master
  　　FSMO maintenance: quit
  　　ntdsutil: quit

參考資料

• KB197132 - Windows 2000 Active Directory FSMO Roles
• KB223346 - FSMO Placement and Optimization on Windows 2000 Domain Controllers
• KB223787 - Flexible Single Master Operation Transfer and Seizure Process
• KB228776 - Setting User Rights for Designating FSMO Roles in an Enterprise
• KB234790 - HOW TO: Find Servers That Hold Flexible Single Master Operations Roles
• KB235617 - How to Find the FSMO Role Owners Using ADSI and WSH
• KB255504 - Using Ntdsutil.exe to Seize or Transfer FSMO Roles to a Domain Controller
• KB255690 - HOW TO: View and Transfer FSMO Roles in the Graphical User Interface
• KB283595 - HOW TO: Change the Role Owner of the Operations Master After a Successful Seizure
• KB316201 - RID Pool Allocation and Sizing Changes in Windows 2000 SP4
• KB324801 - HOW TO: View and Transfer FSMO Roles in the Windows .NET Server Family
  
• KB216970 - Global Catalog Server Requirement for User and Computer Logon
• KB241789 - How to Disable the Requirement that a Global Catalog Server Be Available to Validate User Logons
• KB246303 - XGEN: Global Catalog Searches and Related TCP Ports
• KB248717 - How to Modify Attributes That Replicate to the Global Catalog
• KB252490 - HOWTO: Use ADSI to Query the Global Catalog for a UPN
• KB256287 - Unable to Change Password with User Principal Name When a Global Catalog Server Is Unavailable
• KB256938 - Default Global Catalog Attributes in Windows 2000 Active Directory Schema
• KB313994 - HOW TO: Create or Move a Global Catalog in Windows 2000
• KB315850 - Dcpromo.exe Does Not Work if the Domain Naming Master Is Not a Global Catalog