Solved

Transferring FSMO roles problem

Posted on 2003-12-08
11
1,056 Views
Last Modified: 2008-10-31
Hello AD experts.

I recently checked the schema on our primary domain controller within mmc and found that when I right click Active Directory Schema>Operations master that there was an error. In the box where the current schema master should have been listed was blank, and the box underneath had 'ERROR' in it and said that the schema master was offline.
I transfered the schema master and domain naming master roles manually, and when I went back into the mmc there was an entry for the schema master and it was reporting a status of online.
I rebooted the server after close of businees, and checked again, the server has reverted back to an error status. I have 2 domain controllers. The server that should be the schema master and domain naming master is also the RID/PDC and GC. The other DC is the infrastructure master. The rid/pdc/infrastructure roles when checked in AD all seem OK. If anyone can help with my missing schema master that'd be great.
0
Comment
Question by:demas
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
11 Comments
 
LVL 18

Expert Comment

by:JConchie
ID: 9900135
You need to sieze the schema master role rather than just transfering it........this is the same procedure you would use if a dc holding a FSMO had died.

Choose Run from the Start menu or open a commandline shell, and run the program ntdsutil . Within ntdsutil you will issue a series of commands:

Type "roles"
At fsmo maintenance:, type "connections"
At server connenctions:, type "connect to server serverX@yourdomain.com", that is, the FQDN of the DC you want to take over the role.
At server connenctions:, type "quit"
At fsmo maintenance:, type seize "schema master"
At ntdsutil, type "quit"
0
 
LVL 1

Author Comment

by:demas
ID: 9900288
If the role is transferrable it can't be seized. If you run ntdsutil and issue seize schema master or seize domain naming master you get a message saying serverx knows about
0
 
LVL 1

Author Comment

by:demas
ID: 9900319
Sorry, I'll finish my repl properly this time!

If the role is transferrable it can't be seized. If you run ntdsutil and issue seize schema master or seize domain naming master you get a message saying serverx knows about 5 roles and that the seizure was not required, the role was transferred successfully. I agree that the role needs to be seized, but ntdsutil seems to think its transferrable?
Any ideas
0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 
LVL 18

Expert Comment

by:JConchie
ID: 9900372
I've had to seize roles when I've lost a DC, but I agree, this is very different.  Just to make sure I'm understanding the situation......you only have 2 DCs? on the one hand, you're getting an error message that the SMaster is missing, yet ntdsutil shows it exists?

I haven't come across this before....will see if I can come up with some research references you havn't found yet......hope this doesn't turn into the $200 MS call...  :-)

One thing.....and this is a long shot........you should be able to tranfer the role, just with Enterprise admin powers......domain admin if your domain is the forest root..........but, have you tried redoing the transfer with an account that's in the schema admins group?
0
 
LVL 1

Author Comment

by:demas
ID: 9902489
Thanks for the reply.

This is a small single domain environment. 2 domain conrtollers. The primary dc is the rid/pdc/gc and according to ntdsutil the schema master and domain naming master. The other dc is the infrastructure master.
Yes, when I registered schmmgmt.dll and ran mmc, active directory schema snapin shows an error, but ntdsutil shows that the schema master exists. I will try redoing with an account in the scema admin group. Perhaps, based on the fact that ntdsutil is showing the roles I should maybe not be too worried??
0
 
LVL 18

Accepted Solution

by:
JConchie earned 250 total points
ID: 9904848
The only time trouble with the schema master is  going to have an effect is when you actually need to make schema changes, such as an Exchange 2k/3k upgrade......other than that, you shouldn't notice any problems with your AD.....so at least you are not trying to fix this on an emergency deadline basis........I'll try to get time for some more research today....a quick look around yesterday didn't turn up anything that seemed related to your problem.
0
 
LVL 1

Author Comment

by:demas
ID: 9904915
Exactly, I'm not seeing any adverse problems with AD, it'd just be nice to know why in the MMC it is coming up with an error, but ntdsutil is reporting all is well in the land of AD.
0
 
LVL 18

Expert Comment

by:JConchie
ID: 10097686
Question answered
0
 
LVL 1

Author Comment

by:demas
ID: 10103289
I am awarding JConchie the points based on the fact that he removed my fear of pending doom with reference to the error in the MMC. I would still like to know why I am seeing this error in the mmc and not in ntdsutil (I have checked on other clients of ours and a few of them have the same error) but that wasn't the reason the q was posted originally.
0
 

Expert Comment

by:kage82
ID: 22854780
I had the same issue with my schema, PDC, and Infrastructure. This happened after I tried to move an aging domain controller out of a network.  When I went into the AD users and computers and connected to the same domain controller I was logged into and checked the operations master again they all have the correct server in the operations master block.

In AD U&C, right click on domain and hit Connec to Domain Controller and select the domain controller that you have FSMO roles on.  I'm sure you know how do to all this though.  
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Here's how to start interacting with our community through Post.
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question