Mastering Active Directory - Second Edition

Infrastructure operations master

This role is also a domain-wide setting, and it is responsible for replicating SID and distinguished name (DN) value changes to cross-domains. SID and DN values get changed based on their location in the forest. So, if objects are moved, their new values need to be updated in groups and ACLs located in different domains. This is taken care of by the infrastructure operations master. This will ensure that the changed objects have access to their resources without interruptions.

In the Active Directory domain, the infrastructure operations master role owner can be found using the following command:

Get-ADDomain | select InfrastructureMaster

The infrastructure operations master role owner checks its database ...