Transferring FSMO Roles in Active Directory

Transferring the AD roles are easy using PowerShell. One important issue needs to met in order to be able to transfer the “SchemaMaster” role. The admin who is performing the “SchemaMaster” role transfer needs to be in the “Schema Admins” group. Being in the “Enterprise Admins” and “Domain Admins” groups are not enough.

Move-ADDirectoryServerOperationMasterRole -Identity “dc2” –OperationMasterRole DomainNamingMaster,PDCEmulator,RIDMaster,SchemaMaster,InfrastructureMaster

Earlier post on Active Directory FSMO roles:

Active Directory FSMO Roles

Active Directory FSMO Roles

Knowing which Active Directory server(s) holds the following five roles is important for a number of reasons, the most important of which is that decommissioning a server that holds one or more of these roles may cause serious operational issues within a functioning domain.

The five FSMO (Flexible Single Master Operation) roles are:

Schema Master
Domain Naming Master
Infrastructure Master
Relative ID (RID) Master
PDC Emulator

Find the server(s) that holds the roles from the command line:

netdom query fsmo

Or using PowerShell:

Get-ADForest | Select-Object DomainNamingMaster, SchemaMaster

– and –

 Get-ADDomain | Select-Object RIDMaster, PDCEmulator, InfrastructureMaster 

A follow-up article on transferring the roles can be found here: