Академический Документы
Профессиональный Документы
Культура Документы
• Domain Naming Master: The Domain Naming Master makes sure that you don’t create a second domain in the same forest with
the same name as another. It is the master of your domain names. Creating new domains isn’t something that happens often, so
of all the roles, this one is most likely to live on the same DC with another role.
• RID Master: The Relative ID Master assigns blocks of Security Identifiers (SID) to different DCs they can use for newly created
objects. Each object in AD has an SID, and the last few digits of the SID are the Relative portion. In order to keep multiple objects
from having the same SID, the RID Master grants each DC the privilege of assigning certain SIDs.
• PDC Emulator: The DC with the Primary Domain Controller Emulator role is the authoritative DC in the domain. The PDC Emulator
responds to authentication requests, changes passwords, and manages Group Policy Objects. And the PDC Emulator tells everyone
else what time it is! It’s good to be the PDC.
• Infrastructure Master: The Infrastructure Master role translates Globally Unique Identifiers (GUID), SIDs, and Distinguished Names
(DN) between domains. The infrastructure master is one of the five Flexible Single Master Operations (FSMO) roles assigned to one
or more domain controllers (DCs) in an Active Directory forest. In a forest that contains more than one domain, it is the job of
the infrastructure master to keep cross-domain references up to date
Note : FSMO gives you confidence that your domain will be able to perform the primary function of authenticating users and
permissions without interruption (with standard caveats, like the network staying up).
• Certificate Services –
• It generates, manages and shares certificates. A certificate uses encryption to enable a user to exchange
information over the internet securely with a public key.