https://9to5it.com/transferring-active-directory-fsmo-roles/
Transferring Active Directory FSMO Roles
Check Active Directory FSMO role placement
Before we get going, I thought it would be a good idea to document how to determine the current location of each FSMO role. To do this, the easiest way is to:
- Launch Command Prompt (Start >> Run >> cmd)
- From the Command Prompt, run the following:
netdom query fsmo
- This will list all of the FSMO roles and on what domain controller they are currently running on.
To move AD FSMO Roles using the command line, do the following:
- Log into the DC you want to transfer the role to as an Enterprise Administrator (if transferring the Domain Naming Master or the Schema Master roles). Otherwise you can log in as a Domain Administrator
- Launch Command Prompt (Start >> Run >> cmd) Note: You might need to run command prompt in admin mode depending on the Windows version you are running
- From the command prompt, type
ntdsutil
and press Enter - This will enter the
ntdsutil
command set - Type
roles
and then press Enter - Type
connections
and then press Enter - Type
connect to server <SERVER_NAME>
where<SERVER_NAME>
is the name of the domain controller you want to transfer the role(s) to. See example below:
connect to server WP-DC-V02.testlab.com
- This will connect you to the server you want the role(s) to be transferred to
- Type
q
and press Enter - Type
transfer <ROLE_NAME>
where<ROLE_NAME>
is the name of the FSMO role you want to transfer. Below is an example of how to transfer each role:
transfer infrastructure master
transfer naming master
transfer PDC
transfer RID master
transfer schema master
- Type
q
and press Enter to quit. Repeat until you have exited the ntdsutil command set
Here is the full set of commands you would type to transfer the PDC Emulator role to the WP-DC-V02 domain controller (Note: At the end of each line you would press Enter):
ntdsutil
roles
connections
connect to server WP-DC-V02.testlab.com
q
transfer PDC
No comments:
Post a Comment
Note: only a member of this blog may post a comment.