FSMO roles

[Guest]

Hi

My self is Mahesh and i have query as below....

i have 2 Windows 2000 Advanced Servers and configured one as Root DC and
another one as ADC. These two servers are installed in Microsoft cluster
Environment due to application requirement as application is installed in
cluster.As a part of preventive action we need to carry failover testing of
these ytwo Servers to check whether application will work properly from
secondary server if primary server goes down.During this failover testing we
need to keep Primary server down which is configured as Root DC. Pls let us
know if there is any problem if we carry failover test without transferring
FSMO roles.

Note: All FSMO roles are configured on Primary Server and having Single
Domain and Single Forest.
Both the Servers are installed Configured with GC and DNS Server.

 

[Paul Bergson [MVP-DS]]

The biggest issue could be the PDCe if you have Windows NT or earlier
clients. These client authenticate via the PDCe FSMO role. If you don't
have any older clients and you are only going to be down for a day or two I
wouldn;t give it a second thought.

http://support.microsoft.com/default.aspx/kb/197132

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

Hi Paul

Thanks for the reply and Strongle Agree your point...We have all PCs with
Windows 2000 and Windows XP,but till how many days Domain can work without
FSMO roles.If i am not adding any domain,Schema etc, basically i wanted to
figureout the dependency of FSMO roles other than mentioned in MS articles.

 

[Jorge de Almeida Pinto [MVP - DS]]

I say... look at:
http://support.microsoft.com/kb/281662
http://technet2.microsoft.com/Windo...8de9-4ea5-9c66-33605823bbc71033.mspx?mfr=true

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx

 

[Jorge de Almeida Pinto [MVP - DS]]

The biggest issue could be the PDCe if you have Windows NT or earlier

clients. These client authenticate via the PDCe FSMO role

nope...NT clients can authenticate to ANY DC. However, if nothing is done a
password change is directed to the PDC FSMO. If the DSClient is installed
the NT machine can change the password on ANY DC

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx

 

[Paul Bergson [MVP-DS]]

Thanks for catching...

What was I thinking, you are correct it is password and account lockout as
well as time sync management for the domain.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Jorge de Almeida Pinto [MVP - DS]"