23. Forest Wide Roles - Active Directory

Forest-wide Roles

 Forest-wide roles are unique to a forest, forest-wide roles are:

●       Schema master:
Controls all updates to the schema. The schema contains the master list of object classes and attributes that are used to create all Active Directory objects, such as users, computers, and printers.

●       Domain naming master:
Controls the addition or removal of domains in the forest. When you add a new domain to the forest, only the domain controller that holds the domain naming master role can add the new domain.

There is only one schema master and one domain naming master in the entire forest.

22. What is Operation master Roles?

What is Operation Master Roles?

When a change is made to a domain, the change is replicated across all of the domain controllWhen a change is made to a domain, the change is replicated across all of the domain controllers in the domain. Some changes, such as those made to the schema, are replicated across all of the domains in the forest. This replication is called multimaster replication.

During multimaster replication, a replication conflict can occur if originating updates are performed concurrently on the same object attribute on two domain controllers. To avoid replication conflicts, Active Directory uses single master replication, which designates one domain controller as the only domain controller on which certain directory changes can be made. This way, changes cannot occur at different places in the network at the same time. Active Directory uses single master replication for important changes, such as the addition of a new domain or a change to the forest-wide schema.

Operations that use single-master replication are arranged together in specific roles in a forest or domain. These roles are called operations master roles. For each operations master role, only the domain controller that holds that role can make the associated directory changes. The domain controller that is responsible for a particular role is called an operations master for that role. Active Directory stores information about which domain controller holds a specific role.ers in the domain. Some changes, such as those made to the schema, are replicated across all of the domains in the forest. This replication is called multimaster replication.

21. What is sites in Active directory?

21. What is sites in Active directory?

Sites are defined as groups of well-connected computers. When you establish sites, domain controllers within a single site communicate frequently. This communication minimizes the latency within the site; that is, the time required for a change that is made on one domain controller to be replicated to other domain controllers. You create sites to optimize the use of bandwidth between domain controllers that are in different locations

20. Functions of Active Directory

20. Functions of Active Directory

Active Directory provides the following functions:

●       Centralizes control of network resources
By centralizing control of resources such as servers, shared files, and printers, only authorized users can access resources in Active Directory.

●       Centralizes and decentralizes resource management
Administrators have Centralized Administration with the ability to delegate administration of subsets of the network to a limited number of individuals giving them greater granularity in resource management.

●       Store objects securely in a logical structure
Active Directory stores all of the resources as objects in a secure, hierarchical logical structure.

●       Optimizes network traffic
The physical structure of Active Directory enables you to use network bandwidth more efficiently. For example, it ensures that, when users log on to the network, the authentication authority that is nearest to the user, authenticates them reducing the amount of network traffic.

19. Purpose of Active Directory

Purpose of Active Directory

Ans : Active Directory stores information about users, computers, and network resources and makes the resources accessible to users and applications. It provides a consistent way to name, describe, locate, access, manage, and secure information about these resources.