我现已有一个AD了，但想把旧的移到新的机器上

今天整理自己的机器，发现以前记录的一篇文章，感觉有点价值，保存起来。

 

我现已有一个AD了，但想把旧的移到新的机器上

 

建议您在新的机器上将WIN2000安装好后，执行dcpromo，将它加入成为现有网域控制站 一员。 若您要将旧的机器废除不用，则必须转移root DC 的FSMO role 转移至新庄的DC上。访 法如以下:

问题描述︰How to View and Transfer FSMO Roles in the GUI or Seize by Ntdssutil.exe if FSMO roles holder is offline

解決方法︰ If FSMO is online ------------------------

Transferring the Domain-Specific Roles: RID, PDC, and Infrastructure Master ---------------------------------------------------------------------------

1. Click Start, point to Programs, point to Administrative Tools, and then click "Active Directory Users and Computers".

2. Right-click the icon next to "Active Directory Users and Computers", and then click "Connect to Domain Controller".

NOTE: If you are not on the domain controller where you want to transfer the role ,you need to take this step. It is not necessary if you are connected to the domain controller whose role you want to transfer.

3. Click the domain controller which will be the new role holder, and then click OK.

4. Right-click "Active Directory Users and Computers" icon, and then click Operation Masters.

5. In the Change Operations Master dialog box, click the appropriate tab (RID, PDC, or Infrastructure) for the role you want to transfer.

6. Click Change in the Change Operations Master dialog box.

7. Click OK to confirm that you want to transfer the role.

8. Click OK.

9. Click Cancel to close the dialog box.

Transferring the Domain Naming Master role ------------------------------------------

1. Click Start, point to Programs, point to Administrative Tools, and then click "Active Directory Domains and Trusts".

2. Right-click the Active Directory Domains and Trusts icon, and then click "Connect to Domain Controller".

NOTE: If you are not on the domain controller where you want to transfer the role ,you need to take this step. It is not necessary if you are connected to the domain controller whose role you want to transfer.

3. click the domain controller that will be the new role holder, and then click OK.

4. Right-click "Active Directory Domains and Trusts", and then click Operation Masters.

5. In the Change Operations Master dialog box, click Change.

6. Click OK to confirm that you want to transfer the role.

7. Click OK.

8. Click Cancel to close the dialog box.

Transferring the Schema Master Role -----------------------------------

You can use the Schema Master tool to transfer the role. However, the Schmmgmt.dll dynamic-link library must be registered in order to make the Schema tool available as an MMC snap-in.

Registering the Schema Tool:

1. Click Start, and then click Run.

2. Type "regsvr32 schmmgmt.dll" (without the quotation marks), and then click OK. A message should be displayed stating that the registration was successful.

Transferring the Schema Master Role:

1. Click Start, click run, type "mmc" (without the quotation marks), and then click OK.

2. On the Console, menu click Add/Remove Snap-in.

3. Click Add.

4. Click Active Directory Schema.

5. Click Add.

6. Click Close to close the Add Standalone Snap-in dialog box.

7. Click OK to add the snap-in to the console.

8. Right-click the Active Directory Schema icon, and then click Change Domain Controller.

----正常情况下到此结束

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

If FSMO is offline ------------------------

To seize or transfer the FSMO roles by using Ntdsutil, follow these steps:

1. On any domain controller, click Start, click Run, type "ntdsutil" (without the quotation marks) in the Open box, and then click OK.

NOTE: Microsoft recommends that you use the domain controller that is taking the FSMO roles.

2. Type "roles" (without the quotation marks), and then press ENTER.

NOTE: To see a list of available commands at any of the prompts in the Ntdsutil tool, type "?" (without the quotation marks), and then press ENTER.

3. Type "connections" (without the quotation marks), and then press ENTER.

4. Type "connect to server " (without the quotation marks), where is the name of the server you want to use, and then press ENTER.

5. At the server connections: prompt, type "q" (without the

quotation marks), and then press ENTER again.

6. Type "seize " (without the quotation marks), where is the role you want to seize. For a list of roles that you can seize, type "?" (without the quotation marks) at the Fsmo maintenance: prompt, and then press ENTER, or consult the list of roles at the beginning of this article. For example, to seize the RID Master role, you would type "seize rid master" (without the quotation marks). The one exception is for the PDC Emulator role, whose syntax would be "seize pdc" and not "seize pdc emulator".

NOTE: All five roles need to be in the forest. If the first domain controller is out of the forest then seize all roles. Determine which roles are to be on which remaining domain controllers so that all five roles are not on only one server.

Microsoft recommends that you only seize all roles when the other domain controller is not returning to the domain, otherwise fix the broken domain controller with the roles.

If the original domain controller with the FSMO roles is still online, transfer the roles. Type "transfer " (without the quotation marks).

7. After you seize or transfer the roles, click "q" (without the quotation marks), and then press ENTER until you quit the Ntdsutil tool.

8. Restart the server for all new FSMO Roles to take effect on this computer.

NOTE: Do not put the Infrastructure Master role on the same domain controller as the Global Catalog (GC).

To check if a domain controller is also a Global Catalog server:

1. Click Start, point to Programs, point to Administrative Tools, and then click "Active Directory Sites and Services".

2. Double-click Sites in the left pane, and then browse to the appropriate site or click Default-first-site-name if no other sites are available.

3. Open the Servers folder, and then click the domain controller.

4. In the domain controller's folder, double-click NTDS Settings.

5. On the Action menu, click Properties.

6. On the General tab, locate the Global Catalog check box to see if it is selected.