Menu Close

Category: Active Directory

Decomission a Windows 2003 or 2008 Domain Controller

To decomission an Active Directory Domain Controller (Windows Server 2003/2008) is a fairly straight forward task as long as you make sure nothing is relying on that server.

What to check before decomissioning your DC

The most important thing to check before you are decomissioning your DC are the following components that are either running or registrered against the system:

  • Global Catalog
  • FSMO Roles
  • Bridgehead server
  • General server health
  • Enterprise admin credentials

Simple way to list FSMO Roles in Active Directory

This tip explains the simplest way to check FSMO Roles availability in an Active Directory Forest environment.

FSMO (Flexible Single Master Operations) Roles are very critical for Active Directory to run smoothly. As part of the daily Active Directory health tasks, you need to run several command lines tools or customized scripts to check the status of various Active Directory components which includes checking availability of the FSMO Roles.

To check the availability of FSMO Roles in an Active Directory environment, you can run following command line tools (available by default with Operating System installation):

Netdom Query FSMO

Advantage using NetDom command is that it returns the list with FSMO name and the server holding that FSMO role as shown in the below output. The server name is returned in the FQDN format.

Schema master 	             TEST-DC01.brainpulse.nl 
Domain naming master         TEST-DC01.brainpulse.nl 
PDC 			             TEST-DC01.brainpulse.nl 
RID pool manager 	         TEST-DC01.brainpulse.nl 
Infrastructure master 	     TEST-DC01.brainpulse.nl

I hope this post will help you to find out the FSMO roles in a simple way.