Categories: Active Directory

How Infrastructure master works? is it related to group membership?

The Infrastructure Master is a domain controller role in Active Directory (AD) that is responsible for updating group membership information within a domain. Specifically, the Infrastructure Master is responsible for updating the member attribute of groups that contain members from other domains in the same forest.

When a user or computer account from another domain in the same forest is added or removed from a group, the change is made on the domain controller in the domain where the group is located. The Infrastructure Master is then responsible for updating the member attribute of the group to reflect the change. The Infrastructure Master does this by comparing the security identifier (SID) of the added or removed account with the global catalog, which contains a list of all SIDs in the forest. If the SID is found in the global catalog, the Infrastructure Master updates the member attribute of the group with the correct SID.

Note that the Infrastructure Master only updates the member attribute of groups that contain members from other domains in the same forest. For groups that only contain members from the same domain, the member attribute is updated directly by the domain controller where the change is made.

It’s important to note that if all domain controllers in a domain are also global catalog servers, then the Infrastructure Master role is not needed. This is because the global catalog contains all the information needed to update group membership information, including SIDs from other domains.

In summary, the Infrastructure Master is responsible for updating group membership information within a domain, specifically for groups that contain members from other domains in the same forest. By ensuring that group membership information is accurate and up-to-date, the Infrastructure Master helps to maintain the security and functionality of the AD environment.

So, that’s all in this blog. I will meet you soon with next stuff. Have a nice day!!!

Guys please don’t forget to like and share the post. Also join our WindowsTechno Community and where you can post your queries/doubts and our experts will address them.

You can also share the feedback on below windows techno email id.

If you have any questions, feel free to contact us on admin@windowstechno.com also follow us on facebook@windowstechno to get updates about new blog posts.

Vipan Kumar

Share
Published by
Vipan Kumar

Recent Posts

How can we restore the Sysol?

The Sysvol folder contains Group Policy objects, logon scripts, and other files and settings that are essential…

11 months ago

What is FRS?

FRS stands for File Replication Service, which was a component of Windows Server that provided multi-master replication of files…

11 months ago

What is DFSR?

DFSR stands for Distributed File System Replication, which is a feature in Windows Server that enables organizations…

11 months ago

Is it possible to increase the RID pool? if yes how?

Yes, it is possible to increase the RID (Relative Identifier) pool in an Active Directory (AD) domain.…

11 months ago

How RID master allocate the RID pool to other domain controllers?

The RID Master is a domain controller role in Active Directory (AD) that is responsible for allocating a pool…

11 months ago

How can we see the RID pool?

The Relative Identifier (RID) pool is a range of unique identifiers that are assigned to…

11 months ago