Friday, December 07, 2012 4:11 PM
I was recently hired as a Systems Admin and am trying to get our system in line with best practices. In my digging, I came across an article on the Microsoft site. Here are the relevant bits:
“Unless there is only one domain controller in the domain, the infrastructure master role should not be assigned to the domain controller that is hosting the global catalog. If the infrastructure master and global catalog are on the same domain controller, the infrastructure master will not function. The infrastructure master will never find data that is out of date, so it will never replicate any changes to the other domain controllers in the domain. “
I have two domain controllers, both of which are global catalogs (Server 2008 R2 Standard). One holds the PDC and RID roles and the other holds the Infrastructure role.
Here is my dilemma/problem… If the Infrastructure Master is sitting on a global catalog server, it won’t update so do I need to remove the global catalog from the second server? What is the best way to resolve this? I read another article that basically said that if all DCs are global catalogs, the Infrastructure Master doesn't have anything to do so it is o.k. What are my options here? I really want to make this fir best practices.
Thanks in advance for your help.
Friday, December 07, 2012 7:42 PM
It depends of your Active Directory environnement.
In a single domain forest there are no phantom objects so the Infrastructure Master isn't use and IM could be placed in any domain controller even global catalog.
Check the following links:
FSMO placement and optimization on Active Directory domain controllers : http://support.microsoft.com/kb/223346/en-us
Phantoms, tombstones and the infrastructure master : http://support.microsoft.com/kb/248047/en-us
Sunday, December 09, 2012 9:08 PM
As you have a single domain in use, this is not applicable in your case. Make your two DCs global catalogs.
More details about the Best Practices when assigning FSMO roles: http://windowsdevcenter.com/pub/a/windows/2004/06/15/fsmo.html
If you were in a multi-domain platform using a single AD forest then you will have to take care about this but it is not your case.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Monday, December 10, 2012 6:17 AM
I believe you are looking at an older article. Can you post the link you came across?
To add to the conversation, here's additional information:
Global Catalog and FSMO Infrastructure Master Relationship
MVP, MCT, MCITP/EA, MCTS Windows 2008/R2 & Exchange 2007, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Technical Blogs & Videos: http://www.delawarecountycomputerconsulting.com/
This post is provided AS-IS with no warranties or guarantees and confers no rights.
Monday, December 10, 2012 8:50 AM
There is no work of a IM in single domain but in multi domain there is some work ,again if all the Dcs are not GC, else again there is no work of a IM if all the DCs are GCs.
Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin
- Edited by i.biswajith Monday, December 10, 2012 8:51 AM