Transferring FSMO roles

Discussion in 'Active Directory' started by Steve, Feb 23, 2005.

  1. Steve

    Steve Guest


    I plan on moving the 5 fsmo roles from my first original 2k domain
    controller to a different new 2003 domain controller in the near future. Will
    it hurt to move these roles during the day (in peak usage hours) or is it
    advisable to do this only during low peak hours? Does it really matter?
    Steve, Feb 23, 2005
    1. Advertisements

  2. Hi Steve.

    It really depends on what you are doing at the time. For instance if
    someone where creating large amounts of users then the RID master would need
    to be contactable.

    If you aren't doing such things as adding new domains\users\password changes
    etc, and assuming the you have more than one DC\GC in the domain, then the
    authentication load should be carried by them.

    Frankly, as both machines are required to be online when transfering the
    roles, this is normally a super fast operation and on those very few
    occasions we (PSS) have had issues a seize and removal of the original fsmo
    holder has done the trick.

    Still, it is always best practise to plan changes for out of hours and to
    have a roll back plan in case anything should go wrong.

    HTH, Les

    This posting is provided "AS IS" with no warranties, and confers no rights.
    Lesley Kipling [MSFT], Feb 24, 2005
    1. Advertisements

  3. Steve

    Steve Guest

    Hi Les,

    Thanks for your insight. Everything went well.

    Steve, Feb 24, 2005
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.