
Microsoft
®
Windows Server
™
2003 White Paper
Windows NT 4.0 Server Upgrade Guide 54
• DNS zones can be stored in Active Directory. If you are using the Windows Server DNS service,
primary zone files can be stored in Active Directory for replication to other Active Directory domain
controllers.
• Active Directory uses DNS as a locator service, resolving Active Directory domain, site, and
service names to an IP address. To log on to an Active Directory domain, an Active Directory
client queries its configured DNS server for the IP address of the LDAP service running on a
domain controller for a specified domain. For more information on how Active Directory clients rely
on DNS, see “Locating a Domain Controller” in the Windows Server 2003 on-screen Help and
Support Center.
Active Directory and DNS Differences
While Active Directory is integrated with DNS and they share the same namespace structure, it is
important to distinguish the basic difference between them:
• DNS is a name resolution service. DNS clients send DNS name queries to their configured
DNS server. The DNS server receives the name query and either resolves the name query
through locally stored files or consults another DNS server for resolution. DNS does not require
Active Directory to function.
• Active Directory is a directory service. Active Directory provides an information repository and
services to make information available to users and applications. Active Directory clients send
queries to Active Directory servers using LDAP. To locate an Active Directory server, an Active
Directory client queries DNS. Active Directory requires DNS to function.
For more information on DNS configuration, see the Windows Server 2003 on-screen Help and
Support Center.
Flexible Single Master Operations Roles (FSMO)
In a forest, at least five FSMO roles are assigned to one or more domain controllers. The five
FSMO roles are:
• Schema master. The schema master domain controller controls all updates and modifications to
the schema. To update the schema of a forest, you must have access to the schema master.
There can be only one schema master in the whole forest.
• Domain naming master. The domain naming master domain controller controls the addition or
removal of domains in the forest. There can be only one domain naming master in the whole
forest.
• Infrastructure master. The infrastructure is responsible for updating references from objects in
its domain to objects in other domains. At any one time, there can be only one domain controller
acting as the infrastructure master in each domain.
• Relative ID (RID) master. The RID master is responsible for processing RID pool requests from
all domain controllers in a particular domain. At any one time, there can be only one domain
controller acting as the RID master in the forest.
Comentarios a estos manuales