You could also do this with a script. NTDSutil
is fine or the GUI choices but to complete Robbie’s three step approach
that he uses in his AD Cookbook, here is his script. (Man I love this book, it
is lasting a long time although pages are ripped and dog eared.) ‘---------- config strNewObner – “<NewRoleOwner>”
‘ name of system ‘---------- end config Set objRootDSE = GetObject(“LDAP://”
& strNewOwner & “/RootDSE”) objRootDSE.Put “becomePDC”, 1 objRootDSE.SetInfo ‘---------- End Script Depending on role to be transferred you
can use the following. becomeDomainMaster becomeInfrastructureMaster becomePDC becomeRidMaster becomeSchemaMaster Kevin Sullivan AutoProf From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido there's no problem moving the FSMO roles
to your DC in A in a working environment - no need to move the hardware, unless
you have other requirements to do so. you can easily move the roles via
NTDSutil or via various UIs (ADUC, AD Domains & Trusts, Schema Manager) if
you preferr. _should_ you move the roles to site
A? Depends if you will have IP connectivity from Site C to B or not - if
not, you _have_ to move it, as the DCs in C will at least need to reach the RID
master at least. If you do have connectivity, your motivations for moving
the roles may simply be less dependency on the nw link between A + B. /Guido From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Travis Riddle I was wondering if anyone had any experience/advice that
they would be kind enough to share J Our current environment includes 2 sites. Lets call
them Site A and Site B. We will be adding Site C soon. Site B has the first DC/GC and FSMO RH along with our first
exchange server and a second DC/GC. Site A has a GC and exchange
server. Site C will have a GC along with an Exchange server as well. We
will also be setting up a front-end Exchange server at Site A. We have network connections from Site A to B and A to C, but
not from B to C. The reason for this is there is a point to point from
Site A to B, and A to C has a VPN connection. You might think that we
could just add another internet connection and just VPN all around, but current
location limits that possibility. What we have is currently what we get. Since Site A will be the main “hub” I thought
that we should probably move the FSMO RH to Site A for replication
purposes. Am I justified in my thinking? Will this even make a
difference? Are we asking for more trouble than it is worth? Will I
run into any problems moving the server from one site to the other (both in AD
and physically obviously)? Please let me know and thank you for your time, Travis |
- [ActiveDir] Moving FSMO RH to another site Travis Riddle
- RE: [ActiveDir] Moving FSMO RH to another site Grillenmeier, Guido
- Kevin Sullivan