Moving Fsmo Roles

Planted . Last tended .

Move needs to be run with appropriate access.
Domain wise roles need Domain Admin.
Forest wide roles need Enterprise Admin.
Requires also Schema Admin role.


# Check roles
netdom query fsmo

# move roles 
Move-ADDirectoryServerOperationMasterRole -Identity <newdc> -OperationMasterRole PDCEmulator, RIDMaster, InfrastructureMaster

# move all 5
Move-ADDirectoryServerOperationMasterRole -Identity KEHIDC1 -OperationMasterRole SchemaMaster, DomainNamingMaster, PDCEmulator, RIDMaster, InfrastructureMaster

Seize roles

In case of issues
Use the above command with -Force parameter

references:

Updated August 25, 2026 at 14:30 . Thoughts? Email me.

How to Upgrade Domain Controller TIL

| Run command netdom query fsmo and ensure that old DC is not running any FSMO roles - Moving Fsmo Roles |
How to Install AD TIL

For additional DCs, after install you can move fsmo roles