Transferred FSMO roles from Windows 2008 server to Windows 2016 server but some roles didn't transfer how do I complete the transfer

Question

Transferred FSMO roles from Windows 2008 server to Windows 2016 server but some roles didn't transfer how do I complete the transfer

Mac Johnson 61

Hello all,
I performed a transfer of FSMO roles from my Windows server 2008 server to Windows server 2016 but when I looked at who controls the FSMO roles some are still on the old server and I wanted to know how would I go about completing the FSMO transfer.

The RID is correct

The PDC is incorrect do i just click the "CHANGE" button to move it to the correct server QI-FS-01.questinsurance.local ?

The Infrastructure is correct:

The Schema FSMO is correct:

The Domain Naming FSMO holder is incorrect should be QI-FS-01.questinsuranceinc.local:

When I click on "Change" I get this message so I am not sure what to do at this point.

Any ideas or solutions are greatly appreciated.

Thank You

0 comments

Answer accepted by question author

1 additional answer

Your answer

Answer 1

Anonymous

You can also seize roles to another healthy one.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/transfer-or-seize-fsmo-roles-in-ad-ds

--please don't forget to upvote and Accept as answer if the reply is helpful--

Anonymous

2022-08-24T12:20:52.497+00:00

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--
Mac Johnson 61 Reputation points

2022-08-24T19:45:44.523+00:00

Hello,
I looked over the info in the link but I am not sure what route to take. I don't think I need to seize the roles but I need to know if there is a step or two that will complete the transfer.
Some additional info is the original server Windows 2008 SBS was never demoted could that be why the domain naming fsmo holder and pdc are incorrect
For example the PDC is incorrect but the correct server is listed in the "Change" option so can I just click "Change" to set the PDC correctly?
In addition would running the DCpromo to demote the 2008 SBS correct the issue with the Domain Naming FSMO holder being incorrect?
Thanks for any thoughts.
Anonymous

2022-08-24T19:50:17.45+00:00

I looked over the info in the link but I am not sure what route to take. I don't think I need to seize the roles but I need to know if there is a step or two that will complete the transfer.

The doc I mentioned above has the correct steps

Some additional info is the original server Windows 2008 SBS was never demoted could that be why the domain naming fsmo holder and pdc are incorrect

No, that wouldn't really matter

For example the PDC is incorrect but the correct server is listed in the "Change" option so can I just click "Change" to set the PDC correctly?

Yes, it could work

In addition would running the DCpromo to demote the 2008 SBS correct the issue with the Domain Naming FSMO holder being incorrect?

No, it would not.

--please don't forget to upvote and Accept as answer if the reply is helpful--
Mac Johnson 61 Reputation points

2022-08-24T20:58:04.62+00:00

OK I think I have an understanding of the steps after going back over the info you provided. I saw this warning in the info

Caution

"Do not put the Infrastructure master role on the same DC as the global catalog server. If the Infrastructure master runs on a global catalog server, it stops updating object information because it does not contain any references to objects that it does not hold. This is because a global catalog server holds a partial replica of every object in the forest."

Will this be an issue with me the server I am transferring FSMO roles to is a GC server but once I transfer FSMO the old server will be going offline permanently so I will only have 1 server.

Thank you
Anonymous

2022-08-24T21:04:20.19+00:00

Read one here.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/fsmo-placement-and-optimization-on-ad-dcs

this sounds like a single DC right? In that case its perfectly fine and the warning doesn't apply.

--please don't forget to upvote and Accept as answer if the reply is helpful--
Mac Johnson 61 Reputation points

2022-08-25T02:25:33.77+00:00

Yes it is a single DC .
OK great your time and knowledge is much appreciated.
Anonymous

2022-08-25T12:47:09.947+00:00

Just a reminder, please don't forget to close up the thread by
Anonymous

2022-08-27T12:41:17.26+00:00

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--
Mac Johnson 61 Reputation points

2022-08-28T17:47:25.673+00:00

Hello,
I have an additional question. I am performing this on another server first so the server names are changed
Transferring FSMO roles from serious-fs-01 Windows 2008 SBS to serious-fs-02 Windows 2019 server.
I am on the Windows 2019 server using the mmc snap-in
I registered Schmmgmt.dll
I did the Schema Master Role
!

When I attempted the 2nd step "Transfer domain naming master role" following these instructions to right click "AD Domains and Trust" and click "Connect to Domain" I do not see that option. These are the options I get when I right click

Any ideas on where I am going wrong with this procedure are appreciated.
Thank You
Anonymous

2022-08-28T18:35:25.593+00:00

Looks like FS-02 is already the schema master
Mac Johnson 61 Reputation points

2022-08-28T18:47:50.663+00:00

I was attempting the next step of Transferring the Domain Naming Master and there I didn't see the option step 2 "Right click AD domains and Trust" then click "Connect to domain controller" or do I not have to do this step?
Anonymous

2022-08-28T19:01:52.487+00:00

In second screenshot it is Change Active Directory Domain Controller This just changes the domain controller that the MMC is connected to.

--please don't forget to upvote and Accept as answer if the reply is helpful--
Mac Johnson 61 Reputation points

2022-08-28T19:50:39.117+00:00

DSPatrick,
Thank you for your assistance all looks well with the FSMO role transfer on this server.
I will perform the same steps on another server that needs the roles transferred.
I have another question after the roles have been transferred can I just turn off the old server or do I have to do a DCProm and downgrade the old server.
I really appreciate you and everyone who offered help.
Anonymous

2022-08-28T19:54:25.54+00:00

Its fine to turn it off for a while to make sure all is good but at some point you'll want to dcpromo it or do cleanup to remove remnants from active directory.

--please don't forget to upvote and Accept as answer if the reply is helpful--
Mac Johnson 61 Reputation points

2022-08-28T19:55:58.697+00:00

Gotcha, again many thanks for the help
II will upvote and mark as answered
Anonymous

2022-08-28T20:01:42.01+00:00

You're welcome, and thanks for the feedback.

Answer 2

KurtBMayer 841

@Mac Johnson

There could be some AD replication latency happening. Wait a bit and retry. Also may want to close and re-open the MMCs to get them to refresh. Alternately, try performing the transfer from a different DC.

If needed, use the AD Replication Status Checker Tool to confirm DCs are replicating properly.
Microsoft Active Directory Replication Status Tool

Please upvote or accept this thread as answered if it's helpful, thanks!

Mac Johnson 61 Reputation points

2022-08-24T19:49:40.297+00:00

Thanks for the reply. I don't think the AD rep latency is the issue this was done over 2 weeks ago. I will try to run the replication tool but it told me I need dotnet 4.8 so i have to get that put on first
Thanks for your thoughts

Share via

Transferred FSMO roles from Windows 2008 server to Windows 2016 server but some roles didn't transfer how do I complete the transfer

1 additional answer

Your answer