Catalog Servers. Your domain structure contains one root domain and one child domain. You modify the folder permissions on a file server that is in the child
domain. You discover that some Access Control entries start with S-1-5-21 and that no account name is listed.
You need to list the account names. What should you do?

A.
Move the RID master role in the child domain to a domain controller that holds the Global Catalog.

B.
Modify the schema to enable replication of the friendly names attribute to the Global Catalog.

C.
Move the RID master role in the child domain to a domain controller that does not hold the Global Catalog.

D.
Move the infrastructure master role in the child domain to a domain controller that does not hold the Global Catalog.

Explanation:
If the IM Flexible Single Master Operation (FSMO) role holder is also a global catalog server, the phantom indexes are never created or updated on that domain
controller. (The FSMO is also known as the operations master.) This behavior occurs because a global catalog server contains a partial replica of every object in
Active Directory. The IM does not store phantom versions of the foreign objects because it already has a partial replica of the object in the local global catalog.
For this process to work correctly in a multidomain environment, the infrastructure FSMO role holder cannot be a global catalog server. Be aware that the first
domain in the forest holds all five FSMO roles and is also a global catalog. Therefore, you must transfer either role to another computer as soon as another domain
controller is installed in the domain if you plan to have multiple domains.