Showing posts with label DC Demotion. Show all posts
Showing posts with label DC Demotion. Show all posts

Saturday, September 13, 2008

How to Transfer FSMO Roles

FSMO roles can be transferred using the Ntdsutil.exe command-line utility or by using an MMC snap-in tool. Depending on the FSMO role that you want to transfer, you can use one of the following three MMC snap-in tools:

Active Directory Schema snap-in
Active Directory Domains and Trusts snap-in
Active Directory Users and Computers snap-in

To transfer the FSMO role the administrator must be a member of the following group:
Schema Admins
Enterprise Admins
Domain Admins

Transferring the RID Master, PDC Emulator, and Infrastructure Masters via GUI

Open the Active Directory Users and Computers snap-in from the Administrative Tools folder. If you are NOT logged onto the target domain controller, in the snap-in, right-click the icon next to Active Directory Users and Computers and press Connect to Domain Controller.

Select the domain controller that will be the new role holder, the target, and press OK.

Right-click the Active Directory Users and Computers icon again and press Operation Masters.

Select the appropriate tab for the role you wish to transfer and press the Change button.

Press OK to confirm the change.

Transferring the Domain Naming Master via GUI

Open the Active Directory Domains and Trusts snap-in from the Administrative Tools folder. If you are NOT logged onto the target domain controller, in the snap-in, right-click the icon next to Active Directory Domains and Trusts and press Connect to Domain Controller.

Select the domain controller that will be the new role holder and press OK.

Right-click the Active Directory Domains and Trusts icon again and press Operation Masters.
Press the Change button.

Press OK to confirm the change.

Transferring the Schema Master via GUI

Register the Schmmgmt.dll library by pressing Start > RUN and type: regsvr32 schmmgmt.dll

Press OK. You should receive a success confirmation.

From the Run command open an MMC Console by typing MMC.
On the Console menu, press Add/Remove Snap-in.
Press Add. Select Active Directory Schema.
Press Add and press Close. Press OK.

If you are NOT logged onto the target domain controller, in the snap-in, right-click the Active Directory Schema icon in the Console Root and press Change Domain Controller.

Press Specify .... and type the name of the new role holder. Press OK.
Right-click the Active Directory Schema icon again and press Operation Masters.
Press the Change button.

Transferring the FSMO Roles via Ntdsutil
Caution: Using the Ntdsutil utility incorrectly may result in partial or complete loss of Active Directory functionality.

On any domain controller, click Start, click Run, type Ntdsutil in the Open box, and then click OK.

Type roles, and then press ENTER.

Note: To see a list of available commands at any of the prompts in the Ntdsutil tool, type ?, and then press ENTER.

Type connections, and then press ENTER.
Type connect to server , where is the name of the server you want to use, and then press ENTER.

At the server connections: prompt, type q, and then press ENTER again.

Type transfer . where is the role you want to transfer. Options are:

Transfer domain naming master
Transfer infrastructure master
Transfer PDC
Transfer RID master
Transfer schema master

You will receive a warning window asking if you want to perform the transfer. Click on Yes.

After you transfer the roles, type q and press ENTER until you quit Ntdsutil.exe.
Restart the server and make sure you update your backup.

Saturday, November 3, 2007

Failed DC Demotion

Bulletin: 041207-1

Software Effected:
ServerMigrator, Resemble

Issue:
We are trying to migrate from a member server to a member server. The target server has been demoted from a domain control to a member server. When we start the migration the only option available is to migrate from a member server to a domain controller.

Solution:
This issue is caused from a failed demotion. ServerMigrator, still recognizes the server as a domain controller or a workstation.

If the demotion failed to remove AD from a Windows 2000 or 2003 domain controller (DC) when it was converted from a DC to a member server,

Edit:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions.
Change the ProductType's data value to ServerNT. (Use the exact case.)

Shut down and restart the server.
Delete the NTDS folder if it exists.

Also, The following Knowledge Base articles may be helpful.

HOW TO: Remove Data in Active Directory After an Unsuccessful Domain Controller Demotion (Q216498)
Domain Controller Server Object Not Removed After Demotion (Q216364)

Once the demotion is completed ServerMigrator will recognize the server as a member server.