FSMO Guideline

FSMO Guideline

In general, keep the operations roles on as few domain controllers as possible to simplify tracking the role locations. Place these domain controllers hosting FSMO roles in a location that has the most users for that domain and that has a highly reliable network.

In a single domain forest, leave the five FSMO roles on a single DC. There is no benefit to separating the roles. In the forest root domain of multi-domain forests, leave all the operations master roles on the same domain controller, provided that all domain controllers in the forest root domain are also global catalog servers. There is no benefit to separating the roles.

If you have a single-domain forest, you can setup the infrastructure master on a global catalog server. Otherwise, the infrastructure master should never be placed on a global catalog server.

Post your questions, comments, feedbacks and suggestions

Contact a consultant