Ask a questionAsk a question
 

AnswerFSMO Roles

  • Wednesday, November 04, 2009 5:07 AMSudhir77_ Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi,

    I would like to know more on FSMO roles and what are their uses,and also i have got a problem we had two branches setup and the DC is moved to new branch and we have extended the LAN and both the branches are in same LAN and whenever new user joins we create a username and pwd and when we try to join his system in a domain i receive this error

    " The directory service was unable to allocate relative identifier"

    Can i know what is the reason and can i know do all the 5 fSMO roles should be on a DC or can i distribute the roles two on DC and 3 on ADC?

    Kindly explain me is the 5 FSMO roles can be distributed?

Answers

  • Wednesday, November 04, 2009 6:43 AMRajnish R Sharma Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    check this out http://www.petri.co.il/understanding_fsmo_roles_in_ad.htm

    Also run this command from the coomand prompt netdom query fsmo and see if you get all the 5 FSMO roles listed there. Look specially for RID as you are getting this error "The directory service was unable to allocate relative identifier"




    Raj
  • Wednesday, November 04, 2009 12:12 PMMarcin PolichtMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Sudhir,

    It is possible - although you would need to evaluate whether performance of the DC you designate as the FSMO holder is acceptable. Do you have a single domain forest? If not, obviously you have more than 5 FSMO roles to begin with. More importantly, you need to make decision regarding GC placement - and depending on it, designate an Infrastructure Master.

    If you have a single domain forest, configure all DCs as global catalogs - in this case, Infrastructure Master role becomes irrelevant.

    Refer to http://technet.microsoft.com/en-us/library/cc780487.aspx for details (General recommendations for FSMO placement section)


    hth
    Marcin

All Replies

  • Wednesday, November 04, 2009 6:43 AMRajnish R Sharma Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    check this out http://www.petri.co.il/understanding_fsmo_roles_in_ad.htm

    Also run this command from the coomand prompt netdom query fsmo and see if you get all the 5 FSMO roles listed there. Look specially for RID as you are getting this error "The directory service was unable to allocate relative identifier"




    Raj
  • Wednesday, November 04, 2009 10:02 AMSudhir77_ Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi,

     I would like to know can i have all the 5 FSMO roles on one server or can i split the roles on different servers?

    Pls guide me.

    Regards,
    Sudhir
  • Wednesday, November 04, 2009 12:12 PMMarcin PolichtMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Sudhir,

    It is possible - although you would need to evaluate whether performance of the DC you designate as the FSMO holder is acceptable. Do you have a single domain forest? If not, obviously you have more than 5 FSMO roles to begin with. More importantly, you need to make decision regarding GC placement - and depending on it, designate an Infrastructure Master.

    If you have a single domain forest, configure all DCs as global catalogs - in this case, Infrastructure Master role becomes irrelevant.

    Refer to http://technet.microsoft.com/en-us/library/cc780487.aspx for details (General recommendations for FSMO placement section)


    hth
    Marcin