I want to finish this demo by RDPing back to our Forest root domain
controller for my main head domain. In other words, I'm on
rootdc1.timw.info. And I have all of this code in the exercise files by
the way, so you can make use of this Active Directory PowerShell that
I'm sharing with you. First of all,
in terms of understanding which of your domain controllers in the domain
holds a particular role, let me go to the root of drive C and run netdom
/query fsmo, and that'll just give you a quick report of your current role
holders, and the Forest root first domain controller holds all of those
roles at this point. You can use PowerShell to look both at Forest and
root role holders.
As you can see on line 3,
you can use the PowerShell pipeline, the Get‑ADDomain selecting out
InfrastructureMaster, PDCEmulator, RIDMaster.
We can do Get‑ADForest to look at DomainNamingMaster and SchemaMaster.
And then lastly, the question of moving or seizing roles.
The difference between a move or a seize is a move would be a gentle online
operation, a seize would be a brute force offline operation.
If a role holder is inaccessible,
you'll want to do a seize. And it's the same PowerShell. You do
Move‑ADDirectoryServerOperationsMasterRole, the Identity of the new server,
then you specify the OperationMasterRoles either using the name or
there's an integer, as you can see in my comment up here.
Microsoft has integer values that are a shorthand for each of the roles. I'm
going to in this case move role 0 and 1, PDCEmulator and RIDMaster to my rootdc2
domain controller and Confirm$false. Force is what makes this a seize. Without
the Force, it's a gentle online operation.
So let me actually get rid of the Force, because both of these servers
are fully online and I want to do this in a gentle way.
So let me right‑click and run this selection. And once
that operation completes successfully,
I can verify the change by clearing the screen and running
netdom /query fsmo again, and you can see that PDC and RID pool manager have now been moved to rootdc2.