search for: ridallocationmaster

I put samba on my network last week as a DC and then I transfered all 5 FSMO roles which I thought made it the PDC.? But now I'm not sure because trying to do a backup fails.? Is there a way to determine which machine is the PDC of a domain? -- Bob Wooldridge EDM Incorporated

...07/2019 21:11, Robert A Wooldridge wrote: > > > On 07/23/2019 03:09 PM, Rowland penny via samba wrote: >> A PDC doesn't have any FSMO roles, only an AD DC can hold FSMO roles >> and there are 7 of those: >> >> SchemaMaster >> InfrastructureMaster >> RidAllocationMaster >> PdcEmulationMaster >> DomainNamingMaster >> DomainDnsZonesMaster >> ForestDnsZonesMaster >> >> There is (as you can see above) a role called 'PDC Emulator' but this >> has nothing to do with a PDC. >> >> The roles do not need to be a...

...ocess when upgrading between major > versions. You disagree? First 'RID pool': When a DC creates an object in AD it gives it a RID (The last part of the SID), each DC has its own pool of RIDS to use, hence 'RID pool'. If the DC uses up all of its allocated RIDs, the DC with the RidAllocationMaster FSMO role updates its pool. If you upgrade a DC, it will keep its existing RID pool, but if you add a new DC, it gets a new RID pool and if you do that often enough, you can exhaust the global RID pool, try reading this: https://techcommunity.microsoft.com/blog/askds/managing-rid-pool-depletion/3...

Roland, Thank you for your answers. To be clear, everything will be Bookworm when I'm done. My question about upgrading a new DC rather than upgrading old ones is the "Upgrade a DC and join it to the domain again" process here: https://wiki.samba.org/index.php/Upgrading_a_Samba_AD_DC, right? You said it "raises the RID pools." I don't know what that means. But,

Hi, I have a Samba4 domain consisting of two 4.0.6 Samba servers, in two different AD sites. I am trying to join a new 4.0.7 Samba server as a DC. Previously, I had had some issues caused by hardware failure of one of the DCs; I have learnt my lesson about checking backups properly, as it took me a surprisingly (for me) long time to recover from this (there was no FSMO after the failure and I