FSMO transfer from offline DC

Discussion in 'Active Directory' started by Mike, Sep 2, 2009.

  1. Mike

    Mike Guest

    Hi,

    I have one question concerning FSMO roles.
    In the domain we have 2 DC, both GC and DNS for redundancy.
    DC1 is fsmo holder. Yesterday, I lost SCSI controller on it so the server is
    offline.

    Fortunately, users can logon into domain with no problems.

    Question:
    How can I transfer FSMO roles from offline DC1 to online DC2?

    Many thanks in advance for your help.

    Mike
     
    Mike, Sep 2, 2009
    #1
    1. Advertisements

  2. Mike

    josé Guest

    you have to do a seizure : see http://support.microsoft.com/kb/255504 "seize
    fsmo role" chapter.

    "Mike" wrote:

    > Hi,
    >
    > I have one question concerning FSMO roles.
    > In the domain we have 2 DC, both GC and DNS for redundancy.
    > DC1 is fsmo holder. Yesterday, I lost SCSI controller on it so the server is
    > offline.
    >
    > Fortunately, users can logon into domain with no problems.
    >
    > Question:
    > How can I transfer FSMO roles from offline DC1 to online DC2?
    >
    > Many thanks in advance for your help.
    >
    > Mike
    >
    >
     
    josé, Sep 2, 2009
    #2
    1. Advertisements

  3. Hello Mike,

    It is not only FSMOs that must be seized. But if you have seized the FSMO
    roles to the other DC NEVER bring back the old DC from backup or whatever
    way. Youhave to remove it complete from the AD databse, DNS zones etc.

    Here are the additional steps described:
    http://support.microsoft.com/kb/555846/en-us

    Best regards

    Meinolf Weber
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
    ** Please do NOT email, only reply to Newsgroups
    ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


    > Hi,
    >
    > I have one question concerning FSMO roles.
    > In the domain we have 2 DC, both GC and DNS for redundancy.
    > DC1 is fsmo holder. Yesterday, I lost SCSI controller on it so the
    > server is
    > offline.
    > Fortunately, users can logon into domain with no problems.
    >
    > Question:
    > How can I transfer FSMO roles from offline DC1 to online DC2?
    > Many thanks in advance for your help.
    >
    > Mike
    >
     
    Meinolf Weber [MVP-DS], Sep 2, 2009
    #3
  4. Mike

    Mike Guest

    > you have to do a seizure : see http://support.microsoft.com/kb/255504
    > "seize
    > fsmo role" chapter.


    Thanks for the answer José.
    How can I seize roles from the server who is offline?

    Thanks
     
    Mike, Sep 2, 2009
    #4
  5. Mike,

    Mike schrieb:
    >> you have to do a seizure : see http://support.microsoft.com/kb/255504
    >> "seize
    >> fsmo role" chapter.

    >
    > Thanks for the answer José.
    > How can I seize roles from the server who is offline?


    You do that just as described in the articles posted. The old FSMO role
    owner doesn't have to be online (that would be a "role transfer"). You
    basically use ntdsutil or the GUI tools and tell the other DC to take
    over the roles.

    Make sure you don't bring DC1 (offline now) not online again if you
    seize the roles. If it is forseable that it will be online again the
    next couple of hours/days, you probably best leave the situation alone
    as AD can work without FSMO roles online for a short time.

    Cheers,
    Florian
    --
    Microsoft MVP - Group Policy
    eMail: prename [at] frickelsoft [dot] net.
    blog: http://www.frickelsoft.net/blog.
    Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
     
    Florian Frommherz [MVP], Sep 2, 2009
    #5
  6. Mike

    Mike Guest

    Thank you for the answer Florian,

    > You do that just as described in the articles posted. The old FSMO role
    > owner doesn't have to be online (that would be a "role transfer"). You
    > basically use ntdsutil or the GUI tools and tell the other DC to take over
    > the roles.


    Ok, I understand tranfer of roles. However, seizures for my understanding
    would like to say
    "seize the roles an leave it in some "untaken" state until someone take it
    back".

    So should I do all roles seizures and after take it back (how?), or by doing
    seizures from living DC, the roles will be automatically assigned to him?
    I'm not sure that my explaination are crystal clear :)


    >
    > Make sure you don't bring DC1 (offline now) not online again if you seize
    > the roles. If it is forseable that it will be online again the next couple
    > of hours/days, you probably best leave the situation alone as AD can work
    > without FSMO roles online for a short time.


    I think that the offline DC will not be taken online again. May be that we
    will reinstall new server from scracth and promote it
    to DC/GC for redondouncy reasons, but FSMO roles will stay on new roles
    holder.

    Regards,

    Adi
     
    Mike, Sep 7, 2009
    #6
  7. Hello Mike,

    See my answer to your posting, if you have seized the FSMO roles to another
    DC, NEVER bring back the DC online which has them before. Because that DC
    still is in it's own database the FSMO role holder. The result will be to
    have 2 DCs with the FSMO roles.

    Best regards

    Meinolf Weber
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
    ** Please do NOT email, only reply to Newsgroups
    ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


    > Thank you for the answer Florian,
    >
    >> You do that just as described in the articles posted. The old FSMO
    >> role owner doesn't have to be online (that would be a "role
    >> transfer"). You basically use ntdsutil or the GUI tools and tell the
    >> other DC to take over the roles.
    >>

    > Ok, I understand tranfer of roles. However, seizures for my
    > understanding
    > would like to say
    > "seize the roles an leave it in some "untaken" state until someone
    > take it
    > back".
    > So should I do all roles seizures and after take it back (how?), or by
    > doing
    > seizures from living DC, the roles will be automatically assigned to
    > him?
    > I'm not sure that my explaination are crystal clear :)
    >> Make sure you don't bring DC1 (offline now) not online again if you
    >> seize the roles. If it is forseable that it will be online again the
    >> next couple of hours/days, you probably best leave the situation
    >> alone as AD can work without FSMO roles online for a short time.
    >>

    > I think that the offline DC will not be taken online again. May be
    > that we
    > will reinstall new server from scracth and promote it
    > to DC/GC for redondouncy reasons, but FSMO roles will stay on new
    > roles
    > holder.
    > Regards,
    >
    > Adi
    >
     
    Meinolf Weber [MVP-DS], Sep 7, 2009
    #7
  8. Howdie!

    Mike wrote:
    > Ok, I understand tranfer of roles. However, seizures for my
    > understanding would like to say
    > "seize the roles an leave it in some "untaken" state until someone take
    > it back".


    Well, it is actually "force another DC to take over the role and notify
    others that the old owner doesn't have the role anymore".

    > So should I do all roles seizures and after take it back (how?), or by
    > doing seizures from living DC, the roles will be automatically assigned
    > to him?
    > I'm not sure that my explaination are crystal clear :)


    As said: if you're seizing the roles, you cannot bring back online the
    former role owner. It would try to impersonate the role again and that
    could lead to double RID/SID problems, schema problems and the like. If
    you seized the role, you need to flatten the former role owner and
    re-install it. That would involve a manual metadata cleanup on the
    directory.

    Cheers,
    Florian
     
    Florian Frommherz [MVP], Sep 7, 2009
    #8
  9. that's called SEIZE role when source DC is not alive anymore

    see:
    http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/373.aspx

    --

    Cheers,
    (HOPEFULLY THIS INFORMATION HELPS YOU!)

    # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

    BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
    BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
    ------------------------------------------------------------------------------------------
    * This posting is provided "AS IS" with no warranties and confers no rights!
    * Always test ANY suggestion in a test environment before implementing!
    ------------------------------------------------------------------------------------------
    #################################################
    #################################################
    ------------------------------------------------------------------------------------------

    "Mike" <> wrote in message
    news:...
    > Hi,
    >
    > I have one question concerning FSMO roles.
    > In the domain we have 2 DC, both GC and DNS for redundancy.
    > DC1 is fsmo holder. Yesterday, I lost SCSI controller on it so the server
    > is offline.
    >
    > Fortunately, users can logon into domain with no problems.
    >
    > Question:
    > How can I transfer FSMO roles from offline DC1 to online DC2?
    >
    > Many thanks in advance for your help.
    >
    > Mike
    >
    >
    > __________ Information from ESET Smart Security, version of virus
    > signature database 4508 (20091014) __________
    >
    > The message was checked by ESET Smart Security.
    >
    > http://www.eset.com
    >
    >
    >


    __________ Information from ESET Smart Security, version of virus signature database 4508 (20091014) __________

    The message was checked by ESET Smart Security.

    http://www.eset.com
     
    Jorge de Almeida Pinto [MVP - DS], Oct 14, 2009
    #9
  10. Mike

    jlwali

    Joined:
    Sep 6, 2017
    Messages:
    1
    Likes Received:
    0
    i have a problem when transfer of the operations master role cannot be performed because the requested FSMO operation failed. the current FSMO holder could not be contacted..

    when i run netdom query fsmo

    C:\Documents and Settings\james>netdom query fsmo
    Schema owner zssfserver.zssf.local

    Domain role owner ZSSFSERVER1.zssf.local

    PDC role zssfserver.zssf.local

    RID pool manager ZSSFSERVER1.zssf.local

    Infrastructure owner zssfserver.zssf.local

    The command completed successfully.

    NB: zssfserver is the server i want to be a Primary Domain Controller & ZSSFSERVER1 is the server which is offline/corrupt/formatted

    please assist
     
    jlwali, Sep 6, 2017
    #10
    1. Advertisements

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.
Similar Threads
  1. Norman Zhang

    Cannot Transfer FSMO

    Norman Zhang, Sep 28, 2004, in forum: Windows Server
    Replies:
    1
    Views:
    806
    Norman Zhang
    Sep 28, 2004
  2. Martin Panggabean

    Migrating Win2k->Win2k3 ( Transfer FSMO ) ??

    Martin Panggabean, Dec 15, 2006, in forum: Windows Server
    Replies:
    1
    Views:
    368
    myweb
    Dec 15, 2006
  3. xrs444

    Offline file problem - user can't see offline cache offline!

    xrs444, Nov 12, 2004, in forum: Windows Small Business Server
    Replies:
    0
    Views:
    607
    xrs444
    Nov 12, 2004
  4. Darshan Diora

    Transfer FSMO role error

    Darshan Diora, Dec 22, 2003, in forum: Active Directory
    Replies:
    0
    Views:
    423
    Darshan Diora
    Dec 22, 2003
  5. Kevin Feltmate

    Unable to perform FSMO Transfer

    Kevin Feltmate, Feb 14, 2004, in forum: Active Directory
    Replies:
    3
    Views:
    425
    Deji Akomolafe
    Feb 15, 2004
  6. Guest

    Transfer FSMO Roles

    Guest, Feb 24, 2004, in forum: Active Directory
    Replies:
    1
    Views:
    320
    Chriss3
    Feb 24, 2004
  7. John Park

    About fsmo transfer.

    John Park, Sep 21, 2004, in forum: Active Directory
    Replies:
    0
    Views:
    213
    John Park
    Sep 21, 2004
  8. Just Askin
    Replies:
    8
    Views:
    685
    Saral6978
    Mar 14, 2008
Loading...