Transferring and Seizing Roles

It is possible to transfer the FSMO roles from one DC to another. This might be done because of planned maintenance or outage on a Domain Controller or for performance issues. We now take a look at transferring and seizing the roles. Both will occur some time during your career as a Windows 2000 Active Directory administrator, and understanding the differences between the two will make your life a little easier. Transferring a role is fairly straightforward and can be done with the GUI. Seizing a role is somewhat invasive and requires Ntdsutil.

To transfer the roles, you must have the appropriate permissions. The exact group membership varies based on the specific role you want to manage.

The Domain Admins group ...

Get Special Edition Using Microsoft Active Directory now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.