Site icon WinCert

How to transfer FSMO roles on Windows 2016 Server

<p>In the following article&comma; we will describe how to transfer FSMO roles on Windows Server 2016 Domain Controller using GUI &lpar;graphical user interface&rpar;&period;<&sol;p>&NewLine;<p><strong>FSMO<&sol;strong> abbreviation means <strong>Flexible Single Master Operation<&sol;strong>&period; There are <strong>5 FSMO roles<&sol;strong> that can be transferred from one DC to another&colon;<&sol;p>&NewLine;<p><strong>Schema Master role<&sol;strong><br &sol;>&NewLine;<strong>Domain Naming Master role<&sol;strong><br &sol;>&NewLine;<strong>RID Master role<&sol;strong><br &sol;>&NewLine;<strong>PDC Emulator role<&sol;strong><br &sol;>&NewLine;<strong>Infrastructure Master role<&sol;strong><&sol;p>&NewLine;<p>We will start with transferring RID&comma; PDC&comma; and Infrastructure FSMO role to a different DC in a domain&period; For this purpose domain administrator permission is required&period;<&sol;p>&NewLine;<p><strong>Login to DC on which you want to transfer FSMO roles<&sol;strong>&period; Open Active Directory Users and Computers and right-click on the <strong>Domain Name<&sol;strong>&period; Now click on the <strong>Operations Masters<&sol;strong>&period;<&sol;p>&NewLine;<p><img class&equals;"alignnone size-full wp-image-3045" src&equals;"https&colon;&sol;&sol;www&period;wincert&period;net&sol;wp-content&sol;uploads&sol;2019&sol;04&sol;fsmoroles2&period;png" alt&equals;"" width&equals;"351" height&equals;"229" &sol;><&sol;p>&NewLine;<p>On the <strong>RID tab<&sol;strong> click Change to transfer the <strong>RID FSMO role<&sol;strong> to that server&period; Repeat this action for <strong>PDC<&sol;strong> and <strong>Infrastructure roles<&sol;strong> by changing tabs in the same window&period;<&sol;p>&NewLine;<p><img class&equals;"alignnone size-full wp-image-3046" src&equals;"https&colon;&sol;&sol;www&period;wincert&period;net&sol;wp-content&sol;uploads&sol;2019&sol;04&sol;fsmoroles3&period;png" alt&equals;"" width&equals;"393" height&equals;"452" &sol;><&sol;p>&NewLine;<p>Now&comma; we should open <strong>Active Directory Domains and Trusts<&sol;strong> and right-click on the domain name and select again <strong>Operations Masters<&sol;strong>&period;<&sol;p>&NewLine;<p><img class&equals;"alignnone size-full wp-image-3047" src&equals;"https&colon;&sol;&sol;www&period;wincert&period;net&sol;wp-content&sol;uploads&sol;2019&sol;04&sol;fsmoroles8&period;png" alt&equals;"" width&equals;"498" height&equals;"191" &sol;><&sol;p>&NewLine;<p>Change the Domain Naming Operations Master just as you have changed it previously in Active Directory Users and Computer snap-in&period;<&sol;p>&NewLine;<p><img class&equals;"alignnone size-full wp-image-3048" src&equals;"https&colon;&sol;&sol;www&period;wincert&period;net&sol;wp-content&sol;uploads&sol;2019&sol;04&sol;fsmoroles9&period;png" alt&equals;"" width&equals;"429" height&equals;"307" &sol;><&sol;p>&NewLine;<p>Once done&comma; you should receive &&num;8220&semi;<strong>The operations master was successfully transferred<&sol;strong>&&num;8221&semi; message&period;<&sol;p>&NewLine;<p>We only have one role left to change and that is <strong>Schema Master role<&sol;strong>&period; To achieve this&comma; we have to register the Schema Master dll&period;<&sol;p>&NewLine;<p>In the RUN prompt or CMD prompt type the following command line and hit enter&colon;<&sol;p>&NewLine;<p><strong>regsvr32 schmmgmt&period;dll<&sol;strong><&sol;p>&NewLine;<p><img class&equals;"alignnone size-full wp-image-3049" src&equals;"https&colon;&sol;&sol;www&period;wincert&period;net&sol;wp-content&sol;uploads&sol;2019&sol;04&sol;fsmoroles1&period;png" alt&equals;"" width&equals;"346" height&equals;"161" &sol;><&sol;p>&NewLine;<p>Once done&comma; open <strong>MMC console &lpar;mmc&period;exe&rpar;<&sol;strong>&period; Click File and then <strong>Add&sol;Remove Snap-in<&sol;strong>&period; From the list of <strong>available Snap-ins<&sol;strong> select <strong>Active Directory Schema<&sol;strong> and click <strong>Add<&sol;strong>&period;<img class&equals;"alignnone size-full wp-image-3050" src&equals;"https&colon;&sol;&sol;www&period;wincert&period;net&sol;wp-content&sol;uploads&sol;2019&sol;04&sol;fsmoroles4&period;png" alt&equals;"" width&equals;"807" height&equals;"354" &sol;><&sol;p>&NewLine;<p>Click <strong>OK<&sol;strong>&period;<&sol;p>&NewLine;<p><strong>Right-click<&sol;strong> on the <strong>Active Directory Schema<&sol;strong> and then <strong>Change Active Directory Domain Controller<&sol;strong>&period;<img class&equals;"alignnone size-full wp-image-3051" src&equals;"https&colon;&sol;&sol;www&period;wincert&period;net&sol;wp-content&sol;uploads&sol;2019&sol;04&sol;fsmoroles6&period;png" alt&equals;"" width&equals;"512" height&equals;"144" &sol;><&sol;p>&NewLine;<p>Select the desired Domain Controller and click <strong>OK<&sol;strong>&period;<&sol;p>&NewLine;<p>You might receive the following message&colon; Just click <strong>OK<&sol;strong>&period;<&sol;p>&NewLine;<p>Now right-click again on the <strong>Active Directory Schema<&sol;strong> and select <strong>Operations Masters<&sol;strong>&period; In the <strong>Change Schema Master window<&sol;strong> click to change the <strong>Schema Master role<&sol;strong>&period;<&sol;p>&NewLine;<p><img class&equals;"alignnone size-full wp-image-3052" src&equals;"https&colon;&sol;&sol;www&period;wincert&period;net&sol;wp-content&sol;uploads&sol;2019&sol;04&sol;fsmoroles7&period;png" alt&equals;"" width&equals;"442" height&equals;"411" &sol;><&sol;p>&NewLine;<p>That&&num;8217&semi;s it&excl; You may check that you have transferred all FSMO roles by running the following command from any DC or another machine that is a member of the target domain&colon;<&sol;p>&NewLine;<p><strong>netdom query fsmo<&sol;strong><&sol;p>&NewLine;<p>Comments are welcome&excl;<&sol;p>&NewLine;

Exit mobile version