Your network contains an Active Directory forest named contoso.com. The forest contains
one domain. The domain contains three domain controllers. The domain controllers are
configured as shown in the following table.
DC2 fails and cannot be recovered.
Several weeks later, administrators report that they can no longer create new users and
groups in the domain.
You need to ensure that the administrators can create new users and groups.
What should you add?
A.
the RID master role to DC3
B.the schema master role to DC1
C.the infrastructure master role to DC1
D.the domain naming master role to DC3
A
RID master
The RID master allocates sequences of relative IDs (RIDs) to each of the various domain controllers in its domain. At any time, there can be only one domain controller acting as the RID master in each domain in the forest.
Whenever a domain controller creates a user, group, or computer object, it assigns the object a unique security ID (SID). The SID consists of a domain SID, which is the same for all SIDs created in the domain, and a RID, which is unique for each SID created in the domain.
To move an object between domains (using Movetree.exe), you must initiate the move on the domain controller acting as the RID master of the domain that currently contains the object.