Best Practices for Operation Master Roles on Domain Controllers

Posted on 2014-08-05
Last Modified: 2014-08-06

We have an environment of 4 domain controllers and we just wanted to know which are the best practices for the operations master roles (RID, PDC, Infrastructure...) Is it better to leave all 5 on one server or is it better to divide them?

Thank you in advance!
Question by:Help DeskLF
    LVL 34

    Assisted Solution

    by:Seth Simmons
    only 4 DC total....fine keeping all on one box
    in environments that are much larger you could split them but many times all on one server is fine
    LVL 31

    Accepted Solution

    Well, there are two types of FSMO roles: Schema and Domain.  It is generally considered best practice to at least group them if you don't keep them all together.

    Schema: Schema Master and Domain Naming Master.
    Domain: PDC Emulator, RID Master, Infrastructure Master.

    There are a few other considerations to make, depending on the complexity of your enterprise.  With just four DCs, I would suggest keeping them all together.  But, that is personal preference.

    Best Practices:


    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    The article will show you how you can maintain a simple logfile of all Startup and Shutdown events on Windows servers and desktops with PowerShell. The script can be easily adapted into doing more like gracefully silencing/updating your monitoring s…
    Know what services you can and cannot, should and should not combine on your server.
    In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.
    This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…

    731 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now