active directory domain services unavailable windows 7

In Active Directory domains, the concept of primary and secondary domain controller relationships no longer applies. In modern releases of Windows, domains have been supplemented by the use of Active Directory services.

PDC emulation (Primary Domain Controller)

The PDC will usually be the first domain controller that was created unless it was replaced by a promoted BDC. If a PDC should fail, one of the BDCs can then be promoted to take its place. The BDCs exist in order to provide a backup to the PDC, and can also be used to authenticate users logging on to the network. The PDC will replicate its account database to the BDCs on a regular basis. The BDC computers have a copy of this database, but these copies are read-only. The PDC has the master copy of the user accounts database which it can access and modify. It uses the domain security database on the primary controller. The 'User Manager for Domains' is a utility for maintaining user/group information. The PDC is typically designated as the 'first'. Others, if they exist, are usually a backup domain controller (BDC). In Windows NT 4, one DC serves as the primary domain controller (PDC). If the server performing one of these roles is lost, the domain can still function, and if the server will not be available again, an administrator can designate an alternate DC to assume the role in a process known as 'seizing' the role. Some of these roles must be filled by one DC per domain, while others only require one DC per AD forest. However, there are still several roles that only one domain controller can perform, called the Flexible single master operation roles. Windows 2000 and later versions introduced Active Directory ('AD'), which largely eliminated the concept of PDC and BDC in favor of multi-master replication. if the machine failed), an existing BDC could be promoted to be a PDC. If the PDC was permanently unavailable (e.g. If the PDC was unavailable (or unable to communicate with the user requesting the change), the update would fail. Some network administrators took the additional step of having a dedicated BDC online for the express purpose of being available for promotion if the PDC failed.Ī BDC could authenticate the users in a domain, but all updates to the domain (new users, changed passwords, group membership, etc.) could only be made via the PDC, which would then propagate these changes to all BDCs in the domain. With Windows NT 4 Server, one domain controller per domain was configured as the primary domain controller (PDC) all other domain controllers were backup domain controllers (BDC).īecause of the critical nature of the PDC, best practices dictated that the PDC should be dedicated solely to domain services, and not used for file, print or application services that could slow down or crash the system.

2.1 PDC emulation (Primary Domain Controller).

Active directory domain services unavailable windows 7