Which FSMO role is responsible for time synchronization across the domain and forest?

Which FSMO role is responsible for time synchronization across the domain and forest?

• A. RID Master
• B. Domain Naming Master
• C. PDC Emulator
• D. Schema Master

Answer: (C)

Time synchronization in Windows domains hinges on the PDC Emulator. This FSMO role acts as the authoritative time source for its domain, and by default, the forest root domain’s PDC Emulator serves as the reference for the entire forest. Domain controllers synchronize their clocks with this time source to prevent clock drift, which is crucial for Kerberos authentication and other time-sensitive operations. If the PDC Emulator’s time is out of sync, authentication and scheduling can fail, so having a reliable time authority is essential. The other FSMO roles don’t deal with time. The RID Master handles RID allocation for security principals, the Domain Naming Master controls adding or removing domains, and the Schema Master manages updates to the directory schema. Their purposes are unrelated to time synchronization.

Time synchronization in Windows domains hinges on the PDC Emulator. This FSMO role acts as the authoritative time source for its domain, and by default, the forest root domain’s PDC Emulator serves as the reference for the entire forest. Domain controllers synchronize their clocks with this time source to prevent clock drift, which is crucial for Kerberos authentication and other time-sensitive operations. If the PDC Emulator’s time is out of sync, authentication and scheduling can fail, so having a reliable time authority is essential.

The other FSMO roles don’t deal with time. The RID Master handles RID allocation for security principals, the Domain Naming Master controls adding or removing domains, and the Schema Master manages updates to the directory schema. Their purposes are unrelated to time synchronization.