- Identity with Windows Server 2016:Microsoft 70-742 MCSA Exam Guide
- Vladimir Stefanovic Sasha Kranjac
- 117字
- 2021-07-02 13:40:47
Seizing FSMO roles
FSMO role-seizing is a last-resort action and is only used in scenarios in which the original domain controller isn't available, due to a hardware failure or accidental deletion. The available data on the other domain controllers might be incomplete or out of date. Unlike transferring, FSMO role-seizing can't be performed using Active Directory MMC Snap-ins. FSMO role-seizing can be completed only using PowerShell or the ntdsutil command-line tool.
The PowerShell command for FSMO role-seizing is the same as for transferring, but we need to include the -Force switch:
Move-ADDirectoryServerOperationMasterRole -Identity TargetDCName -OperationMasterRole FSMORoleName -Force
To find out more about how to transfer or seize FSMO roles using ntdsutil, check out https://support.microsoft.com/en-gb/help/255504/using-ntdsutil-exe-to-transfer-or-seize-fsmo-roles-to-a-domain-control.