FSMO PDCe

[Maverick8673]

I have 3 DC's in my domain. I would like to know if there is an automated process to move FSMO roles when the operation master fails. I am seeing some applications have issues when I lose the operation master DC, the only thing I can find is a manual process to move fsmo roles to one of the remaining DC's is this the only way?

 

[markdmac]

You can manually transfer the roles or seize them as needed. You would not want to have an automatic transfer of FSMO roles since that would really represent an automatic seizure and it would be impossible for the OS to determine the proper server to hold the roles.

Suppose for example you had 3 domain controllers (DC1, DC2, DC3) DC1 holds all FSMO roles. Each server is on a seperate floor of a building and sits off of a switch.

No imagine that the backplane of the switch that DC1 is connected to goes bad and there is no communication between the DCs. All workstations on the same floor of DC1 are still able to login and access files on that server. DC2 and DC3 no longer see a FSMO role holder.

Who should get the roles? The right answer is neither since DC1 is still up and running and waiting to service them, the connectivity problem needs to be resolved.

FSMO transfers are meant to be permanent and temporary interruptions should not result in a transfer or seizure of the roles. Tranferring of the schema master and rid master roles can especially have very adverse affects if not coordinated properly.

If you gracefully DCPROMO a server out of the DC role, then its FSMO roles will be transfered to another server. Common practice in this regard is to pick and choose the server and manually transfer the roles.

If you need help on seizing roles, please refer to my FAQ faq96-4733.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript