Transferring FSMO Roles in Windows Server 2008 Table of Contents Using Active Director Schema snapsin to wansfer the Scheme Master ale Naming Maste el Sommany raing aed Tusa snap-in to transfer the Domain Overview ‘This is» mus to tea atic for any system administrator who administers Microsoft Windows Servers. One of any system administator duis, would be to upgrade a cartent domain contol o anew hareware server, One a the crucial steps required to successtly migrate your domain conzller so be abe to suceessuly transfer the FSMO roles to the newhardwateseser FSMO stands fr Flee Single Master Operations, angina forest mare ae atleast five ols this ale. ill be showing you how to ranste the FSO in Windows Server 2008, and in my nest article, Il Show you the complete steps requires to succesfully rigratefupgrade your domain conte to new hardware sever ‘The five F5MO roles are Schema Master Domain Naming Master Infrastructure Master Relative 1D (RID) Master PDCEmulator ‘The fst two roles above ae forest-nide, meaning here sone of exch forthe ene foes. The la three ae domsinaide, meaning thee is one of exch per domain, heres ane domain in your forest you willh3¥e five FSMO roles. If you have three domains in your forest there willbe 23 FS4O rales. ‘The SMO roles a6 going to be transfered, using the following thee MMC snap-in [Active Directory Schema snap-in : Wil be use to transfer the Schema Master ‘Active Directory Domains and Trusts snap-in: Will be used to transer the Domain Naming Master role ‘Active Directory Users and Computer snap-in : Will be used to transfer the RID Master, PDC Emulator and Infrastructure Master roles Noe: The following steps are dane on the Wincows Server 2008 machine thst intend to set as the roles holder (transfer se oles tit} Lees start transfering the FSMO voles Using Active Directory Schema snap-in to transfer the Schema Master role You nave to register schmmgmtall in order tobe abe to use the Aetive Directory Schema sna 1, Click Start > Run 2. Type regev82 schmmgmtall “Type the name of program folder, document errternet ‘oper: [regevadecrmmgmal! =] (‘hist be crete with arinsetvepineges. q Lestat | 3, [em 3. chee 0K‘A popup message ill confirm that sckmmgmtall was sucessuly registred Click OX 4. Clee Star > Run, type mm, then elec OK 6, From the left sie, under AvalableSnapins,cicx on Actve Directory Schema, then dick Add > and ten cick OX[ete recta Dona Tate 1 Discov ore Une nc Corptes 4. From the Isted Domain Contes, dick onthe damaincontoller that you want to be the Schema master role holder and then dik on OK‘You il eceive a message box stating thatthe schema snap-in is nat connected toa schema operations master. Thats fr sue, as we have ot yet set this Windows Serve 2008 domain contller as a Schema Master role olde. This will be done isthe neat ste. Click OK ‘cove recy Shera ngnat covered tw thesdens Siectone ate: Youd aioe esata anys [Soke antares ane mace ova sana Pas en 8. Inthe console tee, ight dick Active Directory Schema [DomainContollerDomainNaml, and then click Operations Master. 410, On the Change Schema Master page, the cutent schema master role holler willbe displayed (cx ELMAJ-DC ELADALNET) an the targeted schema holder wel (x FIMA-DC2K8 FLMAJDALNET) Once you elk Change, the schema master Malet wil become FLMAJ-DC2C8 FLMALDALNET, dick CasngeCle Yes to cone the rte transfor eT a «| ‘The ole will be transfered and a confirmation message willbe displayed, Click OK Naming Master 1. lice Stare > Administrative Took > then click Active Directory Domain an Trustsreeweey ree —— a ae [3 coms Menegement se EE sorcreens Pes ———— Roe Gy Load SeautyFobecy Sa - a sae 3 Sa aananceme a TE Sytem Contguston (3 Tek Scheer be AEE [sar |e 1 WindowsServer Badu ange Active Directory Domain Controle. i or Fle Acen ew Heb #9 (Deol Ele ain 3. Frm the listed Domain Controllers, lick an the demain contreller that yeu want to be the Domain Naming master ole holder and then cick on OK© fey Danan Carter © This Doman Caroler ADLOSHtance Lookintie domains [ELMADALNET a are [se [eps _[ocveore|sae ‘Tips a Uroamy Saver anol zee -as> ELAJDCELIGIDAL NET et WG cris Fie Aten Yew Heb 5. Onthe Operations Master page we are going to change the Domain Naming role hlder fom ELMAJ-DC ELMAJDALINET to ELMIAJ-DC2KB ELWAIDAL NET, Cle Change “he dean rang cpuator mdareyon it donan rane 20 gue Gn one ve Decoy Usman Cooled se 2 ee ee mace rer a Boma casarae oe == Faas lick ¥ES to conf the transfer ofthe Domain Naming rae Ae youare yuan to tree the peste rertece oe A serrate en eeThe ole will be wansfered and a confimation message willbe dsplayed. Click OK then clk Close cl re =a Powe atc “he doran rane peo raster eases cor anes 2 gue ene Ave Dy Conan Cae he ese Potoresheree Daman rang censors maser [pena Fala copa des Crarge Femoomenmoane = come “Ti now, we have sucessfully transferred two FSMO roles the Schema Master roe ane the Domain Naming role, Te lst thee roles can be wanserad using a ingle Snopsin + Using Active Directory Users. 1. lice Stare» Administrative Tooke > then lick Active Directory Users and Computers [Brno ear Astra (02 Active Drectory Stes and Services : oa ~ conenent Sens naan MriiaveTaie + lpr Spt ey Pema ee Seay Contato ows sed Serge rset Senor Sten ana Feces BO) [a [nf |G tatstmate ee re ea |ke | [wma seve tao 2, Right click Active Diectory Users and Comouters, then lik All Tasks > Operations Maser PPO ml Ob SoD i 5 = q a oneClick Yes to comiem the le tanster Ay esse poem oben torsos tet ‘The role will be transferred and a confirmation message willbe displayed, Click OK @ verona socanty tow ‘As forthe infasructure role, once you dck on the Change button you wl receive the lowBynsocx soaiA.teT 9a dab aise (60) ayer The ‘tartar coutore a tae lsretoe seers ‘ver Pease she rear noraton ‘eo youcarah youvart o vate te nasbuctre courte nace, meio? ee ee | eae By default, when you fist install you est Domain Convo it hols the five ols and beside that itis » Global Catalog, your envionment 3 mul- ddomair/fevest, then you should think about structuring your FSMO roles and raster the Inastucturefoleto anane Global Catalog domain canal. se if ‘you have small numberof domain cntlles (ex ‘wo domain contol} then you should not wory about ts. Clic Yes @ verona socanty tow =i 4, The Tabs should now lok ike thi:23 TT 2! RD POC | roma | RO FOC | fom | “reapentrenateenmapeine sections! RDposhtncterCunan | The panna nae anteater pny Dann Corot Gren Sapare sons hte dman toons se (eclere inbes Si ces Owes te en as pectin mer pert ater Fowrocee EIRDALNET brace EINDALNET “oven be cpecto mater ots a flonra “Tovar deeper matures tofolowra Comoe doc Beroe = conde Soro a EweeEDNOLNET DasocaeeNDALNET Io [roc Woanetse | Tres master ree cantar cet for aedonan ee eee Cowan mae [Fawr cae eu come occ Sege [ree cove = That's by now you have sucessfully Wansfered the five FSMO roles othe Windows Server 2008 Domsin Conti Summary ‘Thre are five FSMO roles two that ae forestowie, and thre that are domsin-nide. To transfer any ofthese roles you have to wee the apprapriste Active Directory snap-in. In ry next acl, [willbe snowing yeu the complete steps require to successfully mgrate/upgrae your domain convole ta 3 naw hardware server | a EIMajdal. Net website: tps /unm elmaldal net Win2k8 Transfering FSMO Roles in Windows Serer 2008 asp4!"] [This article post