How to install Services for UNIX on a child domain (326432)


The information in this article applies to:

  • Microsoft Services for Unix 2.0
  • Microsoft Services for Unix 3.0
This article was previously published under Q326432

SUMMARY

Before you can install Microsoft Services for UNIX on a child domain, you must have the Flexible Single Master Operations (FSMO) role as domain role owner. This role is also known as the domain naming master role.

Additionally, the user ID that you use to install Services for UNIX must be a member of the schema administrators group.

MORE INFORMATION

The following information (that was obtained from the Netdom.exe tool) is a sample default domain configuration for a parent and child domain.

Parent Domain - domain.com

  • Schema owner chronic.domain.com (parent domain)
  • Domain role owner chronic.domain.com (parent domain)
  • PDC role chronic.domain.com (parent domain)
  • RID pool manager chronic.domain.com (parent domain)
  • Infrastructure owner chronic.domain.com (parent domain)

Child Domain - child.domain.com

  • Schema owner chronic.domain.com (parent domain)
  • Domain role owner chronic.domain.com (parent domain)
  • PDC role profiteer.child.domain.com (child domain)
  • RID pool manager profiteer.child.domain.com (child domain)
  • Infrastructure owner profiteer.child.domain.com (child domain)
With this configuration, the installation of Network Information Service (NIS) on a child domain does not succeed because you must install NIS on the domain role owner.

Only one of these domain roles exists in each forest. You can transfer this role to any computer in the forest. One way to find this role is to use the netdom query fsmo command of Active Directory directory services from the support tools. You can then transfer the role.

Note If you seize the role, you must format the computer where it is seized from to become the naming master again.

For additional information about how to transfer the domain role, click the following article number to view the article in the Microsoft Knowledge Base:

255690 How to view and transfer FSMO roles in the Graphical User Interface

After you transfer the role, use Netdom.exe to query and to verify that the role has been transferred.

Child Domain - child.domain.com

  • Schema owner chronic.domain.com (parent domain)
  • Domain role owner profiteer.chronic.domain.com (child domain)
  • PDC role profiteer.child.domain.com (child domain)
  • RID pool manager profiteer.child.domain.com (child domain)
  • Infrastructure owner profiteer.child.domain.com (child domain)
Now you can install Services for UNIX on a child domain.

Microsoft also recommends that you run the Sfusch.exe program before you update any schema.

REFERENCES

For more information about how an administrator can use Netdom.exe to join a domain from a command line, see Windows NT 4.0 Resource Kit Supplement II.
Modification Type:MinorLast Reviewed:2/2/2004
Keywords:kbDSWSFU2003Swept kbhowto KB326432 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.