• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 482
  • Last Modified:

FSMO Roles

I need to move around all 5  FSMO roles between few servers. Can I do the move during the production hours. Will this effect the network or the end users ?
0
Lidka
Asked:
Lidka
Advertise Here
  • 3
  • 3
  • 3
  • +4
1 Solution
 
Mike KlineCommented:
It should not have any affect on the users.  Having said that I don't want to be a hypocrite.  I've always done changes during off hours (per policy where I work usually).

Thanks

Mike
0
 
Tony GiangrecoCommented:
We have tried doing this in Windows 2003 & 2008 server environments. We had a problem during production hours on the 2003 server. In theory, it should be ok, but we made a decision to do all future role moves after production hours to be safe.
0
 
Sarang TinguriaSr EngineerCommented:
Transferring FSMO's is 5 Minute procedure but the change is big in Nature even if something breaks there may be major impact on domain ...However doing so will not affect end user under normal circumstances still such activities should be performed off Hours
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Learn More
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
Agree with the above, it SHOULD be safe and transparent... HOWEVER, why risk it?

Another point - WHY are you doing this... why do you "need to move around all 5  FSMO roles between few servers."?  Once, I understand... maybe even twice.  But why a "few"?  And how many is a few?  I would suspect you could face other problems that aren't really FSMO problems but rather are problems because the roles are typically on the first DC built that is also a Global Catalog (that can cause issues) and if you haven't verified AD is healthy, if you start making changes and don't have healthy DCs on the network, you end up with problems.  (RUN DCDIAG First to ensure everything is good!)
0
 
LidkaAuthor Commented:
I have now all 5 roles on one server - server 1,
I will move

schema and domain naming to server 2
infrastructure to server 3 and I will turn off the GC on server 3

So the PDC and Rid will stay unattached on server 1
0
 
Sushil SonawaneCommented:
As you mention plan is right because Infrastructure and GC both are not configure on the same server in network.
0
 
Mike KlineCommented:
Try to make all your DCs GCs if you can.  That is the best practice.

Thanks

Mike
0
 
Sarang TinguriaSr EngineerCommented:
Why create such complex environment ..? When all DC's are GC it doesn't really matters where you are placing the IM role
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
How many DOMAINS (not domain controllers) do you have?  Are you planning on more?

How large is your environment?
0
 
LidkaAuthor Commented:
this is recommended by microsoft so I thought I will follow that and make sure I do not have all roles on one server as I do have now

Schema Master and Domain Naming Master to be on the same machine. This server should also be a GC
PDC Emulator and RID Master to be on the same machine as well. This should be a good machine to handle the load.

Infrastructure Master that do not host GC, but it is in the same side with another server hosting GC.
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
When people say something is recommended by Microsoft (especially FSMO placement) I find it's USUALLY because their misreading something.  Please tell us where you read this and how many domains and users.
0
 
Sarang TinguriaSr EngineerCommented:
0
 
Mike KlineCommented:
0
 
mav7469Commented:
Moving most of the roles should be fine.  However, I agree with everyone else here.  It should be done after hours.

The only issue you will run into the the Schema Role is not one that moves very easily.  I would consider leaving that one on server 1 and move the rest.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Put the Hammer Down
  • 3
  • 3
  • 3
  • +4
Advertise Here
Tackle projects and never again get stuck behind a technical roadblock.
Join Now