locked
Hi why global catalog and infrastructure master not placed in same dc? RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    1
    Sign in to vote

    Hi folks,

     Pls clarify this why GC and Infrastructure master not placed in same DC?

    Thanks& Regards, SelPri | India | +91-9986655633 Future Looks Bright...
    Tuesday, May 24, 2011 6:10 PM

Answers

  • Question
    Sign in to vote
    3
    Sign in to vote

    For single domain, it doesn't matter, you can keep GC with IM, for multiple domain IM is required.

    The domain controller assigned the infrastructure master role is responsible for updating the group-to-user references whenever the members of groups are renamed or changed. At any time, there can be only one domain controller acting as the infrastructure master in each domain.

    When you rename or move a member of a group (and the member resides in a different domain from the group), the group might temporarily appear not to contain that member. The infrastructure master of the group's domain is responsible for updating the group so it knows the new name or location of  the member. The infrastructure master distributes the update via multimaster replication.

    - The IM is responsible for updating cross-domain object references each DC in the Domain, to do that it needs to check for changes on an available GC, then compares its information with the information that the GC has, if any changes, then updates its local information, and updates cross-domain object references each DC in the Domain.

    - The Problem is that If the IM is also a GC, when is going to check for  changes he asks for a GC and because the IM is also a GC it "thinks" that it  has all information updated and there's no need to update the DCs on its domain causing others DCs ending up with nonupdated information, remember  DCs in a domain only know everything about their domain, because the domain  partition is replicated between them.

     

    Regards  

    Awinish Vishwakarma| CHECK MY BLOG

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    Tuesday, May 24, 2011 6:14 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Because Infrastructure master performs its task by comparing its state against the state of a GC - and updates other DCs in the same domain based on the outcome. Effectively, the update would never took place since no differences would be detected

    hth
    Marcin

    Tuesday, May 24, 2011 6:14 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    Have a look to this article named Global Catalog vs Infrastructure Master: http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/03/08/37975.aspx

    For Best practices for assigning FSMO roles: http://oreilly.com/pub/a/windows/2004/06/15/fsmo.html

    Execptions where a GC can also be a IM are mentioned in articles I provided.

     

    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

    Tuesday, May 24, 2011 6:30 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Here is another high level overview that may help you out.

    The Infrastructure Master
    http://www.anitkb.com/2010/03/infrastructure-master.html

    Visit: anITKB.com, an IT Knowledge Base.
    Tuesday, May 24, 2011 6:51 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Please review the FSMO role optimization KB article - http://support.microsoft.com/kb/223346

    Legacy guidance suggests placing the infrastructure master on a non-global catalog server. There are two rules to consider:

    ·        Single domain forest:

    In a forest that contains a single Active Directory domain, there are no phantoms. Therefore, the infrastructure master has no work to do. The infrastructure master may be placed on any domain controller in the domain, regardless of whether that domain controller hosts the global catalog or not.

    ·        Multidomain forest:

    If every domain controller in a domain that is part of a multidomain forest also hosts the global catalog, there are no phantoms or work for the infrastructure master to do. The infrastructure master may be put on any domain controller in that domain. In practical terms, most administrators host the global catalog on every domain controller in the forest.

    ·        If every domain controller in a given domain that is located in a multidomain forest does not host the global catalog, the infrastructure master must be placed on a domain controller that does not host the global catalog.

    Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX

    Blogs - http://blogs.sivarajan.com/
    Articles - http://www.sivarajan.com/publications.html
    Twitter: @santhosh_sivara - http://twitter.com/santhosh_sivara
    This posting is provided AS IS with no warranties,and confers no rights.
    Tuesday, May 24, 2011 7:02 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

     

    The infrastructure master role needs to be held by a domain controller that is not a global catalog server. If the infrastructure master role is held by a domain controller that is a global catalog server, cross-domain object references in that domain will not be updated. If all domain controllers in a domain are global catalog servers, or if you have only one DC, it does not matter which domain controller holds the infrastructure master role.

     

    Regards,

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Thursday, May 26, 2011 5:00 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Because Infrastructure master performs its task by comparing its state against the state of a GC - and updates other DCs in the same domain based on the outcome. Effectively, the update would never took place since no differences would be detected

    hth
    Marcin

    Tuesday, May 24, 2011 6:14 PM
  • Question
    Sign in to vote
    3
    Sign in to vote

    For single domain, it doesn't matter, you can keep GC with IM, for multiple domain IM is required.

    The domain controller assigned the infrastructure master role is responsible for updating the group-to-user references whenever the members of groups are renamed or changed. At any time, there can be only one domain controller acting as the infrastructure master in each domain.

    When you rename or move a member of a group (and the member resides in a different domain from the group), the group might temporarily appear not to contain that member. The infrastructure master of the group's domain is responsible for updating the group so it knows the new name or location of  the member. The infrastructure master distributes the update via multimaster replication.

    - The IM is responsible for updating cross-domain object references each DC in the Domain, to do that it needs to check for changes on an available GC, then compares its information with the information that the GC has, if any changes, then updates its local information, and updates cross-domain object references each DC in the Domain.

    - The Problem is that If the IM is also a GC, when is going to check for  changes he asks for a GC and because the IM is also a GC it "thinks" that it  has all information updated and there's no need to update the DCs on its domain causing others DCs ending up with nonupdated information, remember  DCs in a domain only know everything about their domain, because the domain  partition is replicated between them.

     

    Regards  

    Awinish Vishwakarma| CHECK MY BLOG

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    Tuesday, May 24, 2011 6:14 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello,

    Have a look to this article named Global Catalog vs Infrastructure Master: http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/03/08/37975.aspx

    For Best practices for assigning FSMO roles: http://oreilly.com/pub/a/windows/2004/06/15/fsmo.html

    Execptions where a GC can also be a IM are mentioned in articles I provided.

     

    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

    Tuesday, May 24, 2011 6:30 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Thank you awinish..:)
    Thanks& Regards, SelPri | India | +91-9986655633 Future Looks Bright...
    Tuesday, May 24, 2011 6:48 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Here is another high level overview that may help you out.

    The Infrastructure Master
    http://www.anitkb.com/2010/03/infrastructure-master.html

    Visit: anITKB.com, an IT Knowledge Base.
    Tuesday, May 24, 2011 6:51 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Please review the FSMO role optimization KB article - http://support.microsoft.com/kb/223346

    Legacy guidance suggests placing the infrastructure master on a non-global catalog server. There are two rules to consider:

    ·        Single domain forest:

    In a forest that contains a single Active Directory domain, there are no phantoms. Therefore, the infrastructure master has no work to do. The infrastructure master may be placed on any domain controller in the domain, regardless of whether that domain controller hosts the global catalog or not.

    ·        Multidomain forest:

    If every domain controller in a domain that is part of a multidomain forest also hosts the global catalog, there are no phantoms or work for the infrastructure master to do. The infrastructure master may be put on any domain controller in that domain. In practical terms, most administrators host the global catalog on every domain controller in the forest.

    ·        If every domain controller in a given domain that is located in a multidomain forest does not host the global catalog, the infrastructure master must be placed on a domain controller that does not host the global catalog.

    Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX

    Blogs - http://blogs.sivarajan.com/
    Articles - http://www.sivarajan.com/publications.html
    Twitter: @santhosh_sivara - http://twitter.com/santhosh_sivara
    This posting is provided AS IS with no warranties,and confers no rights.
    Tuesday, May 24, 2011 7:02 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Really thanks JM...:)
    Thanks& Regards, SelPri | India | +91-9986655633 Future Looks Bright...
    Tuesday, May 24, 2011 7:08 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hi siva...thanks you very much...
    Thanks& Regards, SelPri | India | +91-9986655633 Future Looks Bright...
    Tuesday, May 24, 2011 7:08 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

     

    The infrastructure master role needs to be held by a domain controller that is not a global catalog server. If the infrastructure master role is held by a domain controller that is a global catalog server, cross-domain object references in that domain will not be updated. If all domain controllers in a domain are global catalog servers, or if you have only one DC, it does not matter which domain controller holds the infrastructure master role.

     

    Regards,

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Thursday, May 26, 2011 5:00 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Please clarify in which DC Infrastructure Master and in which DC Global catalog will be present in a multi domain environment? 

    Tuesday, February 6, 2018 4:36 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Its because the Data Canter's are Architecturally designed to Support the Global Regional targets so the Domain Controls are separate entities as to deal as the multi domain- multi location specific instances.

    Please ref to

    Sunday, September 2, 2018 2:08 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    what is the difference between domain controller and additional domain controller 

    Abp

    Sunday, September 2, 2018 3:15 AM