Active Directory

The FBI's Criminal Justice Information Services (CJIS) Division processes these requests.

Reasons for Request

An individual may request a copy of his or her own FBI Identification Record for personal review or to challenge information on the Record. Other reasons an individual may request a copy of his or her own Identification Record may include international adoption or to satisfy a requirement to live or work in a foreign country (i.e., police certificate, letter of good conduct, criminal history background, etc.)

Can I request my own record for an employment background check?If you are requesting a background check for employment or licensing within the United States, you may be required by state statute or federal law to submit your request through your state identification bureau, requesting federal agency or other authorized channeling agency. You should contact the agency requiring the background check or the appropriate state identification bureau (or state police) for the correct procedures to follow for obtaining an FBI fingerprint background check for employment or licensing purposes.

Who May Request a Copy of Record

(or Proof that a Record Does Not Exist)

Only the subject of the identification record can request a copy of his own FBI Identification Record.

How to Request a Copy of Record

1. Complete cover letter.

• If for a couple, family, etc., all persons must sign cover letter
• Include your complete mailing address. Please provide telephone number and/or email address, if available.

2. Fingerprint Card

• Obtain a set of your fingerprints (original card, no copies). Your name and date of birth must be provided on the fingerprint card.

  Fingerprints should be placed on a standard fingerprint form (FD-258) commonly used for applicant or law enforcement purposes.

• Include rolled impressions of all ten fingerprints and impressions of all ten fingerprints taken simultaneously (these are sometimes referred to as plain or flat impressions.)
• If possible have your fingerprints taken by a fingerprinting technician (this service may be available at a Law Enforcement Agency.)
• Previously processed fingerprint cards will not be accepted.

3. Payment

• Include $ 18 - U.S. dollars in the form of a money order, certified check made payable to the Treasury of the United States (please be sure to sign where required), or you may pay by credit card. Note: No cash, personal checks, or business checks will be accepted.
• Must be exact amount
• If for a couple, family, etc., include $18 for each person
• If paying by credit card you must include the completed credit card payment form
• Credit cards will not be used for expedited mail services

FBI CJIS Division - Record Request

1000 Custer Hollow Road

Clarksburg, West Virginia 26306

Please Note: If any of the above items are missing or incomplete, the request will be returned. Additional items sent not required for processing will not be returned. Allow approximately 13 weeks for processing, upon receipt to the FBI.

What You Will Receive

1. No Record Response. As of 8/17/09, fingerprint cards are no longer being returned. Due to concerns related to the protection of Personally Identifiable Information, the process has been changed to return a letter which states "no FBI arrest was found". Any question regarding this matter should be directed to the Customer Service Group at 304-625-5590.
2. FBI Identification Record. As of 7/7/09, fingerprint cards are no longer being returned with the FBI Identification Record.

FSMO stands for the Flexible Siingle Master Operations. The Five FSMO Roles are as follows: There are just five operations where the usual multiple master model breaks down, and the Active Directory task must only be carried out on one Domain Controller. FSMO roles: # PDC Emulator - Most famous for backwards compatibility with NT 4.0 BDC's. However, there are two other FSMO roles which operate even in Windows 2003 Native Domains, synchronizing the W32Time service and creating group policies. I admit that it is confusing that these two jobs have little to do with PDCs and BDCs.

# RID Master - Each object must have a globally unique number (GUID). The RID master makes sure each domain controller issues unique numbers when you create objects such as users or computers. For example DC one is given RIDs 1-4999 and DC two is given RIDs 5000 - 9999.

# Infrastructure Master - Responsible for checking objects in other other domains. Universal group membership is the most important example. To me, it seems as though the operating system is paranoid that, a) You are a member of a Universal Group in another domain and b) that group has been assigned Deny permissions. So if the Infrastructure master could not check your Universal Groups there could be a security breach.

# Domain Naming Master - Ensures that each child domain has a unique name. How often do child domains get added to the forest? Not very often I suggest, so the fact that this is a FSMO does not impact on normal domain activity. My point is it's worth the price to confine joining and leaving the domain operations to one machine, and save the tiny risk of getting duplicate names or orphaned domains.

# Schema Master - Operations that involve expanding user properties e.g. Exchange 2003 / forestprep which adds mailbox properties to users. Rather like the Domain naming master, changing the schema is a rare event. However if you have a team of Schema Administrators all experimenting with object properties, you would not want there to be a mistake which crippled your forest. So its a case of Microsoft know best, the Schema Master should be a Single Master Operation and thus a FSMO role.

If your questions is

"The directory containing information about objects in a domain resides on computers called ___ controllers?"

Then the answer is Domain Controllers.

Reference, Pg. 444 Network+ Guide to Networks, Fifth Edition, Tamara Dean.