AD Forest Recovery - Seizing an Operations Master Role (2024)

Seize an operations master role

At the command prompt, type the following command, and then press ENTER:
```
ntdsutil
```
At the ntdsutil: prompt, type the following command, and then press ENTER:
```
roles
```
At the FSMO maintenance: prompt, type the following command, and then press ENTER:
See Also
Active Directory Flexible Single Master Operation (FSMO) roles in Windows - Windows Server
```
connections
```
At the server connections: prompt, type the following command, and then press ENTER:
```
Connect to serverServerFQDN
```
Where ServerFQDN is the fully qualified domain name (FQDN) of this DC, for example: connect to server nycdc01.example.com.
If ServerFQDN does not succeed, use the NetBIOS name of the DC.
At the server connections: prompt, type the following command, and then press ENTER:
```
quit
```
Depending on the role that you want to seize, at the FSMO maintenance: prompt, type the appropriate command as described in the following table, and then press ENTER.

Role	Credentials	Command
Domain naming master	Enterprise Admins	Seize naming master
Schema master	Schema Admins	Seize schema master
Infrastructure master Note: After you seize the infrastructure master role, you may receive an error later if you need to run Adprep /Rodcprep. For more information, see KB article 949257.	Domain Admins	Seize infrastructure master
PDC emulator master	Domain Admins	Seize pdc
RID master	Domain Admins	Seize rid master

After you confirm the request, Active Directory or AD DS attempts to transfer the role. When the transfer fails, some error information appears, and Active Directory or AD DS proceeds with the seizure. After the seizure is complete, a list of the roles and the Lightweight Directory Access Protocol (LDAP) name of the server that currently holds each role appears. You can also run Netdom Query FSMO at an elevated command prompt to verify current role holders.

Note

If this computer was not a RID master before the failure and you attempt to seize the RID master role, the computer tries to synchronize with a replication partner before accepting this role. However, because this step is performed when the computer is isolated, it will not succeed in synchronizing with a partner. Therefore, a dialog box appears asking you whether you want to continue with the operation despite this computer not being able to synchronize with a partner. Click Yes.

Next steps

Feedback

Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.

Submit and view feedback for

This product This page

View all page feedback