SOLVED

Forest DNS Zone Master role, right DC?

%3CLINGO-SUB%20id%3D%22lingo-sub-1440254%22%20slang%3D%22en-US%22%3EForest%20DNS%20Zone%20Master%20role%2C%20right%20DC%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1440254%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20a%20forest%20with%20one%20root%20domain%20and%20three%20child%20domains.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20%22DC%3DForestDNSZones%2CDC%3Ddomain%2CDC%3Dlocal%22%26nbsp%3BfSMORoleOwner%20is%20pointing%20to%20a%20DC%20(valid%20and%20working)%20from%20one%20of%20the%20child%20domains%20and%20not%20to%20the%20Infrastructure%20master%20of%20the%20root%20domain.%3C%2FP%3E%3CP%3EIs%20this%20right%20or%20should%20I%20change%20it%3F%20Thank%20you.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20Regards%2C%3C%2FP%3E%3CP%3ELuis%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1440254%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1440366%22%20slang%3D%22en-US%22%3ERe%3A%20Forest%20DNS%20Zone%20Master%20role%2C%20right%20DC%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1440366%22%20slang%3D%22en-US%22%3E%3CP%3ESounds%20right.%20The%20PDC%20emulator%20for%20the%20domain%20is%20generally%20the%26nbsp%3B%3CSPAN%3EfSMORoleOwner.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1440420%22%20slang%3D%22en-US%22%3ERe%3A%20Forest%20DNS%20Zone%20Master%20role%2C%20right%20DC%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1440420%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3BHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51719%22%20target%3D%22_blank%22%3E%40Dave%20Patrick%3C%2FA%3E%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20for%20your%20quick%20answer.%20Maybe%20it%20wasn't%20clear%20in%20my%20question.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20a%20root%20domain%20domain.local%3C%2FP%3E%3CP%3EI%20have%20a%20child%20domain%20child.domain.local%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Edomain.local%20FSMO%3A%3C%2FP%3E%3CP%3EDC1.domain.local%20-%20Schema%2C%20Domain%20Naming%2C%20PDC%20and%20RID%3C%2FP%3E%3CP%3EDC2.domain.local%20-%20Infrastructure%3C%2FP%3E%3CP%3EDC2.domain.local%20-%20DC%3DDomainDNSZones%2CDC%3Ddoamin%2CDC%3Dlocal%3C%2FP%3E%3CP%3E%3CSTRONG%3EDCb.child.domain.local%20-%20DC%3DForestDNSZones%2CDC%3Ddomain%2CDC%3Dlocal%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Echild.domain.local%20FSMO%3A%3C%2FP%3E%3CP%3EDC1.domain.local%20-%20Schema%2C%20Domain%20Naming%3C%2FP%3E%3CP%3EDCa.child.domain.local%20-%20PDC%2C%20RID%2C%20Infrastructure%3C%2FP%3E%3CP%3EDCa.child.domain.local%20-%20DC%3DDomainDNSZones%2CDC%3Ddoamin%2CDC%3Dlocal%3C%2FP%3E%3CP%3E%3CSTRONG%3EDCb.child.domain.local%20-%20DC%3DForestDNSZones%2CDC%3Ddomain%2CDC%3Dlocal%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20question%20is%3A%20the%20fSMORoleOwner%20for%20ForestDNSZones%20is%20correct%3F%20Shouldn't%20be%26nbsp%3BDC2.domain.local%20(Infrastructure%20master%20of%20root%20domain)%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3ELuis%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1440548%22%20slang%3D%22en-US%22%3ERe%3A%20Forest%20DNS%20Zone%20Master%20role%2C%20right%20DC%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1440548%22%20slang%3D%22en-US%22%3E%3CP%3ENormally%20would%20be%20the%20PDCe%20for%20domain%2C%20but%20would%20probably%20have%20defaulted%20to%20the%20first%20domain%20controller%20installed.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1440619%22%20slang%3D%22en-US%22%3ERe%3A%20Forest%20DNS%20Zone%20Master%20role%2C%20right%20DC%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1440619%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51719%22%20target%3D%22_blank%22%3E%40Dave%20Patrick%3C%2FA%3E%26nbsp%3BI%20understand%20that%2C%20but%20in%20that%20case%20shouldn't%20be%20one%20of%20the%20root%20domain%20DCs%3F%20Why%20is%20it%20a%20child%20domain%20(obviously%20created%20after)%20DC%20with%20no%20other%20FSMO%20roles%20assigned%3F%3C%2FP%3E%3CP%3EShould%20I%20leave%20it%20as%20it%20is%20or%20change%20it%20to%20a%20root%20domain%20DC%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1440634%22%20slang%3D%22en-US%22%3ERe%3A%20Forest%20DNS%20Zone%20Master%20role%2C%20right%20DC%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1440634%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20I'd%20expect%20a%20root%20domain%20controller%20to%20be%20the%20F%3CSPAN%3ESMORoleOwner%20in%20root%20domain.%20Another%20option%20is%20to%20start%20a%20case%20here%20with%20product%20support.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhub%2F4343728%2Fsupport-for-business%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhub%2F4343728%2Fsupport-for-business%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1440657%22%20slang%3D%22en-US%22%3ERe%3A%20Forest%20DNS%20Zone%20Master%20role%2C%20right%20DC%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1440657%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20your%20help.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3ELuis%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1440661%22%20slang%3D%22en-US%22%3ERe%3A%20Forest%20DNS%20Zone%20Master%20role%2C%20right%20DC%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1440661%22%20slang%3D%22en-US%22%3E%3CP%3EYou're%20welcome.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi,

 

I have a forest with one root domain and three child domains.

 

The "DC=ForestDNSZones,DC=domain,DC=local" fSMORoleOwner is pointing to a DC (valid and working) from one of the child domains and not to the Infrastructure master of the root domain.

Is this right or should I change it? Thank you.

 

Best Regards,

Luis

7 Replies

Sounds right. The PDC emulator for the domain is generally the fSMORoleOwner.

 

 

 Hi @Dave Patrick,

 

Thank you for your quick answer. Maybe it wasn't clear in my question.

 

I have a root domain domain.local

I have a child domain child.domain.local

 

domain.local FSMO:

DC1.domain.local - Schema, Domain Naming, PDC and RID

DC2.domain.local - Infrastructure

DC2.domain.local - DC=DomainDNSZones,DC=doamin,DC=local

DCb.child.domain.local - DC=ForestDNSZones,DC=domain,DC=local

 

child.domain.local FSMO:

DC1.domain.local - Schema, Domain Naming

DCa.child.domain.local - PDC, RID, Infrastructure

DCa.child.domain.local - DC=DomainDNSZones,DC=doamin,DC=local

DCb.child.domain.local - DC=ForestDNSZones,DC=domain,DC=local

 

My question is: the fSMORoleOwner for ForestDNSZones is correct? Shouldn't be DC2.domain.local (Infrastructure master of root domain)?

 

Regards,

Luis

 

Normally would be the PDCe for domain, but would probably have defaulted to the first domain controller installed.

 

 

 

@Dave Patrick I understand that, but in that case shouldn't be one of the root domain DCs? Why is it a child domain (obviously created after) DC with no other FSMO roles assigned?

Should I leave it as it is or change it to a root domain DC?

 

Thank you.

Best Response confirmed by LPolicarpo (Occasional Contributor)
Solution

Yes, I'd expect a root domain controller to be the FSMORoleOwner in root domain. Another option is to start a case here with product support.

 

https://support.microsoft.com/en-us/hub/4343728/support-for-business

 

 

 

 

 

Thank you for your help.

 

Regards,

Luis

You're welcome.