Question

Moving FSMO Master role

Asked by: Maximus54

My question is, I wanted to move the Master role from the original domain controller to another domain controller but is that safe if I transfer roles from one DC to the other but let the original DC remain on the network as just a member server.

I was going to transfer the master role using the MMC/AD Schema Admin console to another DC and then demote the original DC as a member server but is that ok? Some articles suggest that after transferring the master role it is not safe to let the original server remain in production on the network so I am trying to get advice from you gurus to see if it is ok. Also if you can give me any additional advice about the things i need to do before I demote the Master role server, I would really appreciate it.

Thanks in advance.

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2009-08-21 at 15:09:04ID24672823
Tags

FSMO

Topics

Microsoft Server

,

Active Directory

Participating Experts
4
Points
500
Comments
6

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. FSMO Roles
    Hi, I have two servers with active directory. Will the FSMO roles automatically be transferred to the other one when I remove acitve directory from the first one? Thanks. Woerts
  2. FSMO Roles
    Does anyone know a good reference for determining a good strategy for deciding which servers should play which FSMO roles? Also references to if it is a good idea or not to move them around... for example I have a server that is currently my schema role master... it is going...
  3. Transfer FSMO roles
    I have (2) windows 2003 servers running AD on a network and I am wanting to transfer the FSMO roles from an older, slower server to a faster one. I am using mmc with the "Active Directory Schema" plug-in, but when I specify "server name" everything goes o...
  4. Moving FSMO Roles
    Hi All, I am installing a Windows 2003 server on a Windows 2000 domain. The new server will become the domain controller and the current server will be demoted to a member server. I have already run Adprep on the Windows 2000 server. My question is what is the easiest way ...
  5. FSMO roles
    I have a Windows 2000 DC that I will be demoting in the very near future, like in the next week or so. It is also a print server as well. We are a very small shop so my DC's are often performing addtional roles. I believe I know the answer to this, but if I demote this server...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: angelIIIPosted on 2009-08-21 at 15:13:08ID: 25156346

yes, it is safe to transfer the role, no issues.
if you want to demote the original server, you HAVE to move the role(s) anyhow.

 

by: angelIIIPosted on 2009-08-21 at 15:13:39ID: 25156349

>Also if you can give me any additional advice about the things i need to do before I demote the Master role server, I would really appreciate it.
what other "stuff/roles" are on that server?

 

by: Maximus54Posted on 2009-08-21 at 15:28:35ID: 25156440

Thanks Angell
Well right now I have DNS, the PDC role, it is also the time server, I have GPO management, Exchange(although i have built another server and moved all mailboxes) I just have the SMTP connector still on it. I am not the original administrator of this server, I just got a new function so I am not sure besides the ones I listed what else I should look for.
Thanks in advance

 

by: leewPosted on 2009-08-21 at 15:45:13ID: 25156530

You cannot demote OR promote an Exchange server - once Exchange is installed, it MUST remain as it is in regards to DC functionality or you can cause problems with Exchange.  Once you remove exchange, you can demote the server.  Migrating the FSMO roles to another server, shouldn't be a problem, but consider that in most network, Active Directory does NOT put a significant load on the server.

Note: If this is Small Business Server, you CANNOT move the roles - doing so will cause the server to start shutting down periodically (every few hours - there is a grace period of up to 3 weeks before this starts happening).

I would recommend ensuring your network is healthy first - run tools like DCDIAG, Exchange Best Practices Analyzer, NETDIAG, even the Essential Business Server (EBS) Planning and Preparation Tool - it's a great tool for verifying the health of the network and it doesn't matter if you're not migrating to the EBS platform.  And it's a free download from Microsoft.  Run these tools BEFORE moving FSMO roles to ensure success, then run them after to verify the things are working as they should be post move.

 

by: okon3Posted on 2009-08-22 at 12:17:41ID: 25159858

It is OK, I did this approximately 6 months ago when moving from 2k to 2k3 domain (yes I'm behind).
Promoted the 2k3 server.
From the newly promoted server I ran AD domains and trust snap in and made this server the operations manager.
The in AD users and computers change the RID, PDC and infrastructure manager.
Here is a link to change the schema master:
http://www.microsoft.com/kb/324801

It actually tells you how to change them all.

Then waited a few minutes and ran NTDSUTIL from the command line and confirm the replication:

http://www.microsoft.com/kb/234790

You can force the master roles change in ntdsutil, but that's where some people have problems IMO, I believe that option is available in case a server that holds the roles crashes and is non-recoverable??

Then demoted the old 2k server and rebooted.  It is still active on our network wthout issue.

Good luck,
 

 

by: bluntTonyPosted on 2009-08-22 at 12:33:29ID: 25159915

HI there,

The articles you read regarding it being unsafe to leave the original role holder on the network were most likely referring to seizing roles. This is different to transferring. When you seize a role, the original role holder doesn't have to be running; you do this when a role-holding server fails and is not running. For example, if you had to seize roles from a failed server, but then fixed that server, you should not introduce that server back to the network, as it still thinks it's the role holder, and this causes problems. The exception to this is the PDC emulator - it is OK to re-introduce a failed server after seizing the PDC emulator role from it, but ONLY this role. As the PDC is typically also the RID master it usually is a no-go.

Transferring roles involves both servers being on the network and being aware of the change, so it is fine to leave the server running after transferring the roles.

So yes, it is fine to transfer the roles using the MMC, as long as both servers are running, and, like leew says, the role holder isn't an SBS server as it will have a fit if you do. Always best to check for any existing errors, particularly replication errors, beforehand.

Tony.

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...