Catalog Servers. Your domain structure contains one root domain and one child domain.

You modify the folder permissions on a file server that is in the child domain. You discover that some Access Control entries start with S-1-5-21 and that

no account name is listed.

You need to list the account names. What should you do?

A. Move the RID master role in the child domain to a domain controller that holds the Global Catalog.

B. Modify the schema to enable replication of the friendly names attr

ibute to the Global Catalog.

C. Move the RID master role in the child domain to a domain controller that does not hold the Global Catalog.

D. Move the infrastructure master role in the child domain to a domain controller that does not hold the Global

Catalog.

Explanation:

If the IM Flexible Single Master Operation (FSMO) role holder is also a global catalog server, the phantom indexes are never created or updated on that domain controller. (The FSMO is also known as the operations master.) T

his behavior occurs because a global catalog server contains a partial replica of every object in Active Directory. The IM does not store phantom versions of the foreign objects because it already has a partial replica of the object in the local global cat

alog.

For this process to work correctly in a multi domain environment, the infrastructure FSMO role holder cannot be a global catalog server. Be aware that the first domain in the forest holds all five FSMO roles and is also a global catalog. Therefore,

you must transfer either role to another computer as soon as another domain controller is installed in the domain if you plan to have multiple domains.