Understanding Server Roles | Introducing Microsoft Windows Server(TM) 2003

Computers that function as servers within a domain can have one of two roles: member server or domain controller. A server that is not in a domain is a stand-alone server.

Member Servers

A member server is a computer that

Runs Windows NT 4.0 Server, Windows 2000 Server, or a Windows Server 2003 operating system.
Belongs to a domain.
Is not a domain controller.

A member server does not process account logons , participate in Active Directory replication, or store domain security policy information. Member servers typically function as file servers, application servers, database servers, Web servers, certificate servers, firewalls, and remote access servers.

The following security- related features are common to all member servers:

Member servers adhere to Group Policy settings that are defined for the site, domain, or organizational unit.
Access control exists for resources that are available on a member server.
Member server users have assigned user rights.
Member servers contain a local security account database, the Security Accounts Manager (SAM).

Domain Controllers

A domain controller is a computer that

Runs Windows NT 4.0 Server, Windows 2000 Server, or a Windows Server 2003 operating system.
Stores a read/write copy of the domain database.
Participates in multimaster replication.
Authenticates users.

Domain controllers store directory data and manage communication between users and domains, including user logon processes, authentication, and directory searches. Domain controllers synchronize directory data using multimaster replication, ensuring consistency of information over time.

Active Directory supports multimaster replication of directory data between all domain controllers in a domain; however, multimaster replication is not appropriate for some directory data replication. In this case, a domain controller, called the operations master, will process data. In an Active Directory forest, there are at least five different operations master roles that are assigned to one or more domain controllers.

As the needs of your computing environment change, you might want to change the role of a server. Using the Active Directory Installation Wizard, you can promote a member server to a domain controller, or you can demote a domain controller to a member server.

Stand-Alone Servers

A stand-alone server is a computer that

Runs Windows NT 4.0 Server, Windows 2000 Server, or a Windows Server 2003 operating system.
Is not a member of domain.

If a server is installed as a member of a workgroup, that server is a stand-alone server. Stand-alone servers can share resources with other computers on the network, but they do not receive any of the benefits provided by Active Directory.

For more information, see the Windows Server 2003 Help and Support Center.

Top