Sunday 16 September 2018

Powershell: Move (Transfering or Seizing) FSMO Roles to Another Domain Controller

 

Powershell: Move (Transfering or Seizing) FSMO Roles to Another Domain Controller


Advantages

Moving the FSMO roles with the AD PowerShell has the following advantages:
  1. It must not first connect to the future Domain Controller role holders.
  2. Only Seizing (role holder is offline) the FSMO roles will require an additional parameter, you must use -Force parameter.
  3. Transfering or Seizing the FSMO roles must not necessarily be done from the role holder or the future role holder. You can run the AD-Powershell command from a Windows 7 Client or Windows Server 2008 R2 member server (after RSAT is installed).

Transfering all roles

Move-ADDirectoryServerOperationMasterRole -Identity "Target-DC" -OperationMasterRole 0,1,2,3,4

Seizing all roles

Move-ADDirectoryServerOperationMasterRole -Identity "Target-DC" -OperationMasterRole 0,1,2,3,4 -Force



Role NameNumber
PDCEmulator0
RIDMaster1
InfrastructureMaster2
SchemaMaster3
DomainNamingMaster4


Transfering all roles

Move-ADDirectoryServerOperationMasterRole -Identity "Target-DC" -OperationMasterRole SchemaMaster,RIDMaster,InfrastructureMaster,DomainNamingMaster,PDCEmulator

Seizing all roles

Move-ADDirectoryServerOperationMasterRole -Identity "Target-DC" -OperationMasterRole SchemaMaster,RIDMaster,InfrastructureMaster,DomainNamingMaster,PDCEmulator

No comments:
Write comments