In this post I will show you how to transfer FSMO roles using Ntdsutil tool on Windows Server through Command Prompt (CMD).
FSMO roles are critical for the proper functioning of Active Directory. If the standard PowerShell commands fail, you can use the Ntdsutil tool as an alternative. Below are the detailed steps for transferring FSMO roles safely:
Step 1: Launch Ntdsutil
- Open a Command Prompt with administrative privileges.
- Type:
ntdsutil{codeBox}
Step 2: Enter FSMO Maintenance Mode
- At the ntdsutil: prompt, type:
roles{codeBox}
- Press Enter. You will see the fsmo maintenance: prompt.
Step 3: Establish a Connection to the Target Server
- Type:
connections{codeBox}
- At the server connections: prompt, type:
connect to server <TargetServerName>{codeBox}
Replace <TargetServerName> with the new domain controller’s name.
Step 4: Return to FSMO Maintenance Mode
- At the server connections: prompt, type:
q{codeBox}
Step 5: Transfer FSMO Roles
- At the fsmo maintenance: prompt, type:
transfer <RoleName>{codeBox}
Replace <RoleName> with one of the following:- schema master
- naming master
- rid master
- pdc
- infrastructure master
- Confirm each transfer when prompted by typing Yes.
Step 6: Exit Ntdsutil
- Type:
q{codeBox}
- Repeat until you exit the utility.
Step 7: Restart the Server
- Restart the server to apply the changes.
Step 8: Verification
- After transferring FSMO roles, confirm their new location using PowerShell:
Get-ADDomain | Select-Object InfrastructureMaster, PDCEmulator, RIDMaster Get-ADForest | Select-Object SchemaMaster, DomainNamingMaster{codeBox}
The Ntdsutil tool provides a reliable method to transfer FSMO roles. By carefully following the outlined steps, you can ensure the roles are transferred safely and without disrupting your Active Directory environment. Always verify the changes to confirm the new role holders and maintain a healthy domain infrastructure.