Saturday, September 13, 2008

How to Transfer FSMO Roles

FSMO roles can be transferred using the Ntdsutil.exe command-line utility or by using an MMC snap-in tool. Depending on the FSMO role that you want to transfer, you can use one of the following three MMC snap-in tools:

Active Directory Schema snap-in
Active Directory Domains and Trusts snap-in
Active Directory Users and Computers snap-in

To transfer the FSMO role the administrator must be a member of the following group:
Schema Admins
Enterprise Admins
Domain Admins

Transferring the RID Master, PDC Emulator, and Infrastructure Masters via GUI

Open the Active Directory Users and Computers snap-in from the Administrative Tools folder. If you are NOT logged onto the target domain controller, in the snap-in, right-click the icon next to Active Directory Users and Computers and press Connect to Domain Controller.

Select the domain controller that will be the new role holder, the target, and press OK.

Right-click the Active Directory Users and Computers icon again and press Operation Masters.

Select the appropriate tab for the role you wish to transfer and press the Change button.

Press OK to confirm the change.

Transferring the Domain Naming Master via GUI

Open the Active Directory Domains and Trusts snap-in from the Administrative Tools folder. If you are NOT logged onto the target domain controller, in the snap-in, right-click the icon next to Active Directory Domains and Trusts and press Connect to Domain Controller.

Select the domain controller that will be the new role holder and press OK.

Right-click the Active Directory Domains and Trusts icon again and press Operation Masters.
Press the Change button.

Press OK to confirm the change.

Transferring the Schema Master via GUI

Register the Schmmgmt.dll library by pressing Start > RUN and type: regsvr32 schmmgmt.dll

Press OK. You should receive a success confirmation.

From the Run command open an MMC Console by typing MMC.
On the Console menu, press Add/Remove Snap-in.
Press Add. Select Active Directory Schema.
Press Add and press Close. Press OK.

If you are NOT logged onto the target domain controller, in the snap-in, right-click the Active Directory Schema icon in the Console Root and press Change Domain Controller.

Press Specify .... and type the name of the new role holder. Press OK.
Right-click the Active Directory Schema icon again and press Operation Masters.
Press the Change button.

Transferring the FSMO Roles via Ntdsutil
Caution: Using the Ntdsutil utility incorrectly may result in partial or complete loss of Active Directory functionality.

On any domain controller, click Start, click Run, type Ntdsutil in the Open box, and then click OK.

Type roles, and then press ENTER.

Note: To see a list of available commands at any of the prompts in the Ntdsutil tool, type ?, and then press ENTER.

Type connections, and then press ENTER.
Type connect to server , where is the name of the server you want to use, and then press ENTER.

At the server connections: prompt, type q, and then press ENTER again.

Type transfer . where is the role you want to transfer. Options are:

Transfer domain naming master
Transfer infrastructure master
Transfer PDC
Transfer RID master
Transfer schema master

You will receive a warning window asking if you want to perform the transfer. Click on Yes.

After you transfer the roles, type q and press ENTER until you quit Ntdsutil.exe.
Restart the server and make sure you update your backup.

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.