Lab-II

Windows Administration

Submitted To:Prof. Robert Pearce

Submitted By:Karanvir Salwan Varinder Aujla Jaspreet Kaur

Name the new server as grp16-dc2

Configure the new Server with ip address 192.168.16.2

Install Adds

Promote the new server to become a domain controller and Add the server to your existing domain

Research FSMO Roles

What is it? SolFSMO stands for Flexible Single Master Operations. FSMO roles helps to prevent conflicts in the Active Directory. How many roles are there? SolThere are five FSMO rolestwo roles are in every forest and three roles are in every domain.

How many roles are Forest level vs. Domain level? Sol Forest Wide Roles: (i) Schema Master-It is Shared between every tree and domain in the forest and must be consistent between all objects.It controls all updates and modifications to the schema. Domain Naming-Every domain in the forest must have unique name.The domain naming master is required while adding domain to the forest. Domain Wide Roles: (i) Relative ID (RID) Master- It Allocates RIDs to DCs within a Domain.Whenever we create an object like user,group or computer in active directory it is provided with SID and RID which are unique to the domain. (ii) PDC Emulator-The PDC emulator acts as a Windows NT PDC for backwards compatibility, it can process updates to a BDC. Infrastructure Master- It updates the references from the objects in its domain to objects in other domain. (ii)

(iii)

Explain why you would want to transfer these roles to other domain controllers SolWe have to move the roles when a server that holds one or more FSMO roles has suffered catastrophic hardware failure. it is called seizing the role. It can be done by the graphical user interface (GUI) or the command line interface (CLI), while seizing a role can only be done by CLI. There are two steps to transfer the roles :Connect to a domain controller Transfer or seize the role