War On Errors Sign In
Article ID: 31339
Last Reviewed: 5/3/2010 10:17:12 AM

How to seize FSMO roles using ntdsutil on Windows Server 2003

Problem

When is it necessary to seize FSMO Roles?

1- The current Role holder is experiencing an operational error that prevents an FSMO-dependent operation from completing successfully and that role cannot be transferred.

2-A domain controller that owns an FSMO role is force-demoted by using the dcpromo /forceremoval command.
 
3- The operating system on the computer that originally owned a specific role no longer exists or has been reinstalled


Resolution

The five roles to seize or move are:
- Schema master - Forest-wide and one per forest.
- Domain naming master - Forest-wide and one per forest.
- RID master - Domain-specific and one for each domain.
- PDC - PDC Emulator is domain-specific and one for each domain.
- Infrastructure master - Domain-specific and one for each domain

1. On any domain controller, click Start > Run, type "Ntdsutil" in the Open box, and then click OK

2. Type roles, and then press ENTER.

ntdsutil: roles
fsmo maintenance:

3. Type "connections", and then press ENTER.

fsmo maintenance: connections
server connections:

4. Type "connect to server <servername>", where <servername> is the name of the server you want to use, and then press ENTER.

server connections: connect to server serverX
Binding to serverX ...
Connected to serverX using credentials of locally logged on user.
server connections:


6. At the server connections: prompt, type "q", and then press ENTER again

server connections: q
fsmo maintenance:

7. Type "seize <role>", where <role> is the role you want to seize. For example, to seize the RID Master role, you would type "seize rid master":

Seize domain naming master
Seize infrastructure master
Seize PDC
Seize RID master
Seize schema master


8. You will receive a warning window asking if you want to perform the seize. Click on Yes
9. Repeat steps 6 and 7 until you've seized all the required FSMO roles.

After you seize or transfer the roles, type q, and then press ENTER until you quit the Ntdsutil tool.
Keywords:
fsmo maintenance Type roles PDC Emulator type ntdsutil seize FSMO roles