Mastering Active Directory

Infrastructure operations master

This role is also a domain-wide setting, and it is responsible for replicating SID and distinguished name value changes to cross-domains. SID and DN values get changed based on their location in the forest. So if objects are moved, their new values need to be updated in groups and ACLs located in different domains. This is taken care of by the infrastructure operations master. This will ensure that the changed objects have access to their resources without interruptions.

The infrastructure operation master role owner checks its database periodically for foreign group members (from other domains) and once it finds those objects, it checks its SID and DN values with the global catalog server. If the value in ...