Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 632
  • Last Modified:

Transfering FSMO Roles

I have one Windows 2000 DC(Root) and one Windows 2003 DC(Additional DC).  I want to format my Windows 2000 DC because it is creating lot of problems. DNS is installed on both DC's, I want to trasfer all roles from Windows 2000 DC to 2003 DC(make 2003 as Root).  I have read lots of answers on experts-exchange, and they all say I need to transfer the FSMO roles off the old DC. Thanks in Advance
0
xravi
Asked:
xravi
  • 4
  • 3
1 Solution
 
Chris DentPowerShell DeveloperCommented:

Hi,

DCPromo on the server should transfer the roles automatically, but it's always best to be sure. So this list are all that is required to move those roles manually.

The commands you need to use to move the FSMO roles from one DC to the other are:

Start
Run
ntdsutil

This loads the NTDS Maintenance Utility. After that you need to type:

Roles
Connections
Connect to Server <2003 DC (place you want the FSMO Roles to be)>
Quit <back to FSMO maintenance>

To check where the roles are at the moment type:

Select Operation Target
List Roles for Connected Server
Quit <back to FSMO maintenance>

This produces a list, you need to move any role that is located on the 2000 DC.

To transfer each of the roles type (from the FSMO maintenance prompt):

Transfer Domain Naming Master
Transfer Infrastructure Master
Transfer RID Master
Transfer Schema Master
Transfer PDC

It's a good idea to check that each is in the right place...

Select Operation Target
List Roles for Connected Server

Then you can use Quit until you're out of NTDSUtil.

You will also need to ensure that your 2003 server is acting as Global Catalog. This one is through AD Sites and Services, find your server, select NTDS Settings and open the properties. Global Catalog is a little tick box.

To remove the old server from the domain you should run DCPromo on it. This leaves the domain nice and clean and won't cause any problems should you re-add the server as a DC later.

HTH

Chris
0
 
Leandro IaconoSenior Premier Field EngineerCommented:
Microsoft KB Article on this.
http://support.microsoft.com/default.aspx?scid=kb;en-us;255504

But what Chris said is perfect. Greets out to you mate!
0
 
xraviAuthor Commented:
Mr. Chris thanks for ur nice comments, i have another question too... i have installed DNS on windows 2003 DC, after few seconds the zone has transfered automatically. Will the zone be there if i remove the first DNS server that have installed. How can i check the transfered zone is active directory integrated(Read/Write Copy). I have tested the second DNS by nslookup it is working perfectly. Many Thanks in advannce
0
Become an Android App Developer

Ready to kick start your career in 2018? Learn how to build an Android app in January’s Course of the Month and open the door to new opportunities.

 
Chris DentPowerShell DeveloperCommented:

If you setup the zone as AD Integrated it won't disapear or fail when the first server disapears.

You can find out if the zone is AD Integrated or not by opening up the Properties for the zone (in DNS Manager, Type setting).

Chris
0
 
xraviAuthor Commented:
Hi Chris I didn't create any zone, once i installed DNS service on my second DC the zone has transfered automatically to second DNS. Will it create any problem if i remove first DNS. Many Thanks
0
 
Chris DentPowerShell DeveloperCommented:

It shouldn't cause any problems no. So long as the client PCs (and the servers) on your network refer to the new DNS.

Chris
0
 
xraviAuthor Commented:
Thanks very much Chris.
0
 
Chris DentPowerShell DeveloperCommented:

Pleasure :)
0

Featured Post

Become an Android App Developer

Ready to kick start your career in 2018? Learn how to build an Android app in January’s Course of the Month and open the door to new opportunities.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now