Skip to main content
Transfer Active Directory Master Roles
- On one of your DC's...
- In a command prompt run:
- netdom query fsmo /domain:YourDomainName
- This will show you the 5 Master Roles and which server has them
- To change the Schema Owner Role...
- On the DC that currently owns the role...
- Add Active Directory Schema snap-in to MMC console
- Right click Active Directory Schema
- Choose Change Domain Controller
- Select the DC you wish to have seize the role
- Right click Active Directory Schema once again
- Choose Operations Master
- Ensure that the appropriate server is listed as the one that the role will be transferred to
- Click Change and then Ok
- Now you can change back to the command prompt and re-run the command:
- netdom query fsmo /domain:YourDomainName
- This should now show the new Schema Owner
- To change the Domain Role Owner (a.k.a. Domain Naming Master)...
- On the DC that you want to transfer the role to...
- Add Active Directory Domains and Trusts to MMC console
- Right click Active Directory Domains and Trusts
- Choose Change Active Directory Domain Controller
- Select This Domain Controller then click on the pertinent DC in the box below this option
- Click Ok
- Right click Active Directory Domains and Trusts
- Choose Operations Master
- Ensure the appropriate server is listed as the one that the role will be transferred to
- Click Change and then Ok
- Now you can change back to the command prompt and re-run the command:
- netdom query fsmo /domain:YourDomainName
- This should now show the new Domain Role Owner
- To change each of the following 3 roles (RID, PDC, and Infrastructure)...
- On the DC that you want to transfer the role to...
- Add Active Directory Users and Computers to MMC console
- Right click Active Directory Users and Computers
- Mouse over All Tasks
- Choose Operations Masters
- Select the tab corresponding to the role you wish to transfer
- Ensure the appropriate server is listed as the one that the role will be transferred to
- Click Change and then Yes
- After each one you can change back to the command prompt and re-run the command:
- netdom query fsmo /domain:YourDomainName
- This should now show the new role owner for the role that you just transferred
Comments