Forest-Wide Roles

Within a single forest are two FSMOs that operate as per-forest roles: schema master and domain naming master. Each of these FSMOs performs tasks that must be completed at a single DC for proper operation of Active Directory. Either of these two roles can exist on any DC in the forest. These roles are capable of being held on only a Windows 2000 Domain Controller.

Schema Master

The schema master initially is located on the first DC installed in the forest. Because only one schema is shared between all DCs in the forest, only one schema master exists. Any time a change is made to the schema, the change is performed at the schema master. You can transfer the schema master role to any DC in the forest. The owner of each role is ...

Get Special Edition Using Microsoft Active Directory now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.