ads

Style3[OneLeft]

Style3[OneRight]

Style5[ImagesOnly]

Style2

Manage FISMO Roles with PowerShell

Problem:  

How to use PowerShell commands to transfer FISMO roles?

Solution: 

Active Directory PowerShell module.

Assumptions:  

FISMO PowerShell management requires Active Directory PowerShell module.

  Import-Module ActiveDirectory

Example 1.  Show forest FSMO roles (forest):

PS> Get-ADForest contoso.com| ft DomainNamingMaster, SchemaMaster

Example 2.  Show domain FSMO roles (domain): 

PS> Get-ADDomain contoso.com | ft InfrastructureMaster, PDCEmulator, RIDMaster

Example 3. Transfer single role to a domain controller.  

PS> Move-ADDirectoryServerOperationMasterRole -Identity "DCX" PDCEmulator

Table1:  PowerShell FISMO role names:

PDCEmulator         0
RIDMaster         1
InfrastructureMaster 2
SchemaMaster 3
DomainNamingMaster 4

Example 4.  Transfer multiple roles.

Move-ADDirectoryServerOperationMasterRole -Identity “DCX” –OperationMasterRole DomainNamingMaster,PDCEmulator,RIDMaster,SchemaMaster,InfrastructureMaster

Example 5: Transfer all roles with numbers: 

Move-ADDirectoryServerOperationMasterRole “DCX” –OperationMasterRole 0,1,2,3,4


Example 6.  Transfer FSMO roles between domain controllers:

Move-ADDirectoryServerOperationMasterRole

That's It!

References:

https://docs.microsoft.com/en-us/powershell/module/addsadministration/move-addirectoryserveroperationmasterrole?view=win10-ps
https://blogs.technet.microsoft.com/canitpro/2017/05/24/step-by-step-migrating-active-directory-fsmo-roles-from-windows-server-2012-r2-to-2016/