In a multi-domain Active Directory environment, which FSMO role is responsible for updating an object's SID and distinguished name?

In a multi-domain Active Directory environment, which FSMO role is responsible for updating an object's SID and distinguished name?

• A. Infrastructure Master
• B. Schema Master
• C. Domain Naming Master
• D. RID Master

Answer: (A)

When you have objects in one domain that are referenced across other domains, keeping those references current is essential. The Infrastructure Master is the FSMO role that handles updating cross-domain references, so changes to an object’s distinguished name (DN) or its SID usage in ACLs across domains are propagated correctly during replication. This ensures that other domains continue to locate and authorize the object after moves, renames, or other domain-wide changes. Other FSMO roles handle different tasks: the RID Master issues SIDs for new objects within its domain but doesn’t manage cross-domain reference updates; the Domain Naming Master controls the addition and removal of domains in the forest; the Schema Master governs changes to the AD schema.

When you have objects in one domain that are referenced across other domains, keeping those references current is essential. The Infrastructure Master is the FSMO role that handles updating cross-domain references, so changes to an object’s distinguished name (DN) or its SID usage in ACLs across domains are propagated correctly during replication. This ensures that other domains continue to locate and authorize the object after moves, renames, or other domain-wide changes.

Other FSMO roles handle different tasks: the RID Master issues SIDs for new objects within its domain but doesn’t manage cross-domain reference updates; the Domain Naming Master controls the addition and removal of domains in the forest; the Schema Master governs changes to the AD schema.