{"id":54283,"date":"2022-08-23T09:00:40","date_gmt":"2022-08-23T07:00:40","guid":{"rendered":"https:\/\/nolabnoparty.com\/?p=54283"},"modified":"2022-08-23T10:53:12","modified_gmt":"2022-08-23T08:53:12","slug":"active-directory-quickly-transfer-fsmo-roles","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/active-directory-quickly-transfer-fsmo-roles\/","title":{"rendered":"Active Directory: quickly transfer FSMO roles"},"content":{"rendered":"<p><img decoding=\"async\" class=\"aligncenter wp-image-54286 size-full\" title=\"windows-quickly-transfer-fsmo-roles-01\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2022\/08\/windows-quickly-transfer-fsmo-roles-01.jpg\" alt=\"windows-quickly-transfer-fsmo-roles-01\" width=\"602\" height=\"202\" \/><\/p>\n<p>During the <strong>upgrade of the Domain Controllers<\/strong> installed in your <a href=\"https:\/\/nolabnoparty.com\/en\/migrate-root-ca-to-a-new-server\/\">Active Directory<\/a> there is a quick way to transfer FSMO roles to the new server.<\/p>\n<p>As best practice, you should <strong>avoid an in-place upgrade<\/strong> of the DC but perform a fresh installation of the new Domain Controller instead.<!--more--><\/p>\n<p>If all Domain Controllers are being upgraded, we need to identify the Domain Controller that currently holds the <a href=\"https:\/\/nolabnoparty.com\/en\/migrate-active-directory-to-windows-2012-r2-pt-1\/\">FSMO roles<\/a>.<\/p>\n<p>To identify which DC has the FSMO roles installed, from a Domain Controller open the <strong>Command Prompt as Administrator<\/strong> and run the following command:<\/p>\n<p><span style=\"color: #0000ff;\">C:\\&gt; netdom fsmo query<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-54288 size-full\" title=\"windows-quickly-transfer-fsmo-roles-02\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2022\/08\/windows-quickly-transfer-fsmo-roles-02.jpg\" alt=\"windows-quickly-transfer-fsmo-roles-02\" width=\"599\" height=\"186\" \/><\/p>\n<p>The command will return the Domain Controller with FSMO roles installed.<\/p>\n<p>&nbsp;<\/p>\n<h2>Transfer FSMO roles<\/h2>\n<p>In this example, we need to transfer the <a href=\"https:\/\/docs.microsoft.com\/en-us\/troubleshoot\/windows-server\/identity\/fsmo-roles\" target=\"_blank\" rel=\"noopener\">FSMO roles<\/a> from the old DC <em>w16-dc01<\/em> to the new <em>w19-dc01<\/em> server.<\/p>\n<p>Although you can use the <strong>GUI or the netdom command<\/strong> to transfer FSMO roles from a DC to another, there is a <strong>quicker way with PowerShell<\/strong> instead. From the Domain Controller, open the <strong>Windows PowerShell as Administrator<\/strong>.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-54290 size-full\" title=\"windows-quickly-transfer-fsmo-roles-03\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2022\/08\/windows-quickly-transfer-fsmo-roles-03.jpg\" alt=\"windows-quickly-transfer-fsmo-roles-03\" width=\"370\" height=\"283\" \/><\/p>\n<p>Run the following command to <strong>transfer all five FSMO roles<\/strong> from the old DC to the new server (<em>w19-dc01<\/em> in the example). Type <strong>A and press Enter<\/strong> when prompted.<\/p>\n<blockquote><p>Move-ADDirectoryServerOperationMasterRole -Identity &lt;domain controller&gt; -OperationMasterRole 0,1,2,3,4<\/p><\/blockquote>\n<p>The <strong>acceptable values<\/strong> for this parameter are:<\/p>\n<ul>\n<li>PDCEmulator or 0<\/li>\n<li>RIDMaster or 1<\/li>\n<li>InfrastructureMaster or 2<\/li>\n<li>SchemaMaster or 3<\/li>\n<li>DomainNamingMaster or 4<\/li>\n<\/ul>\n<p><span style=\"color: #0000ff;\">PS C:\\&gt; Move-ADDirectoryServerOperationMasterRole -Identity w19-dc01 -OperationMasterRole 0,1,2,3,4<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-54292 size-large\" title=\"windows-quickly-transfer-fsmo-roles-04\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2022\/08\/windows-quickly-transfer-fsmo-roles-04-600x80.jpg\" alt=\"windows-quickly-transfer-fsmo-roles-04\" width=\"600\" height=\"80\" \/><\/p>\n<p>Enter the following command to check if FSMO roles has been <strong>transferred successfully<\/strong>.<\/p>\n<p><span style=\"color: #0000ff;\">C:\\&gt; netdom fsmo query<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-54295 size-full\" title=\"windows-quickly-transfer-fsmo-roles-05\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/2022\/08\/windows-quickly-transfer-fsmo-roles-05.jpg\" alt=\"windows-quickly-transfer-fsmo-roles-05\" width=\"600\" height=\"176\" \/><\/p>\n<p>All FSMO roles <strong>are now assigned<\/strong> to the new Domain Controller.<\/p>\n<p><img decoding=\"async\" title=\"signature\" src=\"https:\/\/nolabnoparty.com\/wp-content\/uploads\/images\/firma.jpg\" alt=\"signature\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>During the upgrade of the Domain Controllers installed in your Active Directory there is a quick way to transfer FSMO roles to the new server. As best practice, you should avoid an in-place upgrade of the DC but perform a fresh installation of the new Domain Controller instead.<\/p>\n","protected":false},"author":3,"featured_media":54286,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"linkedin_93tdZWzMZc_93tdZWzMZc":"","facebook_2879994398731222_17841400390232720":"","twitter_113568041_113568041":"","mastodon_115463926174894442_115463926174894442":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[913,1065],"tags":[688,2502,1572,2501],"class_list":["post-54283","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-active-directory-en","category-microsoft-en","tag-active-directory-en","tag-fsmo-roles","tag-server-en","tag-transfer","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/54283","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=54283"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/54283\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/54286"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=54283"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=54283"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=54283"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}