# FSMO - Transfer Seize the roles to a new server

#### Old School Way: Using Graphical Tools (MMC)

1. <span class="T286Pc" data-processed="true" data-sfc-cp="">**Check Current Roles**: Run `netdom query fsmo` on any DC to see who holds them.</span>
2. <span class="T286Pc" data-processed="true" data-sfc-cp="">**Transfer Domain Roles (RID, PDC, Infrastructure)**:</span>
    - <span class="T286Pc" data-processed="true" data-sfc-cp="">Open **Active Directory Users and Computers (ADUC)**.</span>
    - <span class="T286Pc" data-processed="true" data-sfc-cp="">Right-click the domain name and select **Operations Masters**.</span>
    - <span class="T286Pc" data-processed="true" data-sfc-cp="">Go to each tab (RID, PDC, Infrastructure) and click **Change** to move the role to the New DC.</span>
3. <span class="T286Pc" data-processed="true" data-sfc-cp="">**Transfer Schema Master Role**:</span>
    - <span class="T286Pc" data-processed="true" data-sfc-cp="">Open **MMC**, then **Add/Remove Snap-in**.</span>
    - <span class="T286Pc" data-processed="true" data-sfc-cp="">Add **Active Directory Schema**, then register `schmmgmt.dll` first if needed (`regsvr32 schmmgmt.dll`).</span>
    - <span class="T286Pc" data-processed="true" data-sfc-cp="">Right-click **Active Directory Schema** and select **Operations Master**, then **Change**.</span>
4. <span class="T286Pc" data-processed="true" data-sfc-cp="">**Transfer Domain Naming Master Role**:</span>
    - <span class="T286Pc" data-processed="true" data-sfc-cp="">Open **Active Directory Domains and Trusts**.</span>
    - <span class="T286Pc" data-processed="true" data-sfc-cp="">Right-click it and select **Operations Master**, then click **Change** to move it to the New DC.</span>
    - <span class="T286Pc" data-processed="true" data-sfc-cp="">**Check Roles**: </span>
        1. `<span class="T286Pc" data-processed="true" data-sfc-cp="">(Get-ADDomain).PDCEmulator, (Get-ADDomain).RIDMaster, (Get-ADDomain).InfrastructureMaster</span>`
        2. `(Get-ADForest).DomainNamingMaster, (Get-ADForest).SchemaMaster`

#### New Age: Using PowerShell

1. <span class="T286Pc" data-processed="true" data-sfc-cp="">**Check Roles**: </span>
    1. `<span class="T286Pc" data-processed="true" data-sfc-cp="">(Get-ADDomain).PDCEmulator, (Get-ADDomain).RIDMaster, (Get-ADDomain).InfrastructureMaster</span>`
    2. `(Get-ADForest).DomainNamingMaster, (Get-ADForest).SchemaMaster`
2. <span class="T286Pc" data-processed="true" data-sfc-cp="">**Transfer All Roles**: Run this command on the *destination* DC (or any admin machine with AD module).</span>
3. Replace `"YourNewDCName"` with the actual server name

You can use the following to move the FSMO roles

```shell
Move-ADDirectoryServerOperationMasterRole -Identity "YourNewDCName" -OperationMasterRole SchemaMaster, DomainNamingMaster, PDCEmulator, RIDMaster, InfrastructureMaster
```

Optional: The `-Force` parameter bypasses some prompts, use carefully

```shell
Move-ADDirectoryServerOperationMasterRole -Identity "YourNewDCName" -OperationMasterRole SchemaMaster, DomainNamingMaster, PDCEmulator, RIDMaster, InfrastructureMaster -Force
```

#### Important Notes

1. Ensure the source DC is online for a clean transfer (Microsoft recommends this)
2. Verify Active Directory replication is healthy before starting
3. Only **seize** roles (using `ntdsutil` or PowerShell with `-Force`) if the old DC is permanently offline