{"id":2524,"date":"2024-12-20T19:51:46","date_gmt":"2024-12-21T01:51:46","guid":{"rendered":"https:\/\/techlensfocus.com\/?p=2524"},"modified":"2024-12-21T12:56:50","modified_gmt":"2024-12-21T18:56:50","slug":"understand-fsmo-roles-in-active-directory-and-how-to-manage-them","status":"publish","type":"post","link":"https:\/\/techlensfocus.com\/index.php\/2024\/12\/20\/understand-fsmo-roles-in-active-directory-and-how-to-manage-them\/","title":{"rendered":"Understand FSMO Roles in Active Directory and How to Manage Them"},"content":{"rendered":"\n<div class=\"wp-block-ideabox-toc ib-block-toc\" data-anchors='h2,h3,h4,h5,h6' data-collapsable='true' ><div class=\"ib-toc-container ib-toc-list-style-numbers ib-toc-hierarchical ib-toc-expanded\"><div class=\"ib-toc-header\"><div class=\"ib-toc-header-title\">Table of Contents<\/div><div class=\"ib-toc-header-right\"><span class=\"ib-toc-icon-collapse\"><span class=\"dashicon dashicons dashicons-minus\"><\/span><\/span><span class=\"ib-toc-icon-expand\"><span class=\"dashicon dashicons dashicons-plus\"><\/span><\/span><\/div><\/div><div class=\"ib-toc-separator\" style=\"height:2px\"><\/div><div class=\"ib-toc-body\"><ol class=\"ib-toc-anchors\"><\/ol><\/div><\/div><\/div>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Introduction<\/h2>\n\n\n\n<p><\/p>\n\n\n\n<p>In Windows Server, Active Directory (AD) relies on Flexible Single Master Operations roles to maintain its integrity and proper function. These roles are divided into forest-wide and domain-specific functions. Knowing which domain controller holds each FSMO role is crucial for AD administration. <\/p>\n\n\n\n<p>This blog post will guide you how to identify the DCs responsible for the Domain Naming Master and Schema Master roles, as well as how to view domain-specific FSMO roles.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Are FSMO Roles?<\/h2>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Operations Master Roles<\/strong>, also known as <strong>Flexible Single Master Operations<\/strong> (<strong>FSMO<\/strong>) Roles, are critical for maintaining the consistency and stability of Active Directory environment. FSMO roles are initially assigned to the <strong>first domain controller<\/strong> in the domain or forest.<\/p>\n\n\n\n<p>In addition, FSMO roles are single-master to prevent conflicts and maintain consistency. We have <strong>Forest-wide<\/strong> FSMO roles and <strong>Domain-specific<\/strong> FSMO roles: <\/p>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Forest-wide FSMO Roles<\/h3>\n\n\n\n<p><\/p>\n\n\n\n<p>Forest-wide FSMO roles are special Domain Controller (DC) roles in Active Directory that affect the entire forest. There are two forest-wide FSMO roles:<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Schema Master<\/h4>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Scope:<\/strong> Forest-level role.<\/li>\n\n\n\n<li><strong>Responsibilities:<\/strong>\n<ul class=\"wp-block-list\">\n<li>Manages the <strong>Active Directory schema<\/strong>, which defines the structure of the directory, including attributes and classes of objects.<\/li>\n\n\n\n<li>Controls schema modifications, such as adding attributes or classes.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Default Location:<\/strong> The <strong>first domain controller<\/strong> in the forest root domain.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Domain Naming Master<\/h4>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Scope:<\/strong> Forest-level role.<\/li>\n\n\n\n<li><strong>Responsibilities:<\/strong>\n<ul class=\"wp-block-list\">\n<li>Manages changes to the <strong>domain namespace<\/strong>, ensuring all domain names are unique within the forest.<\/li>\n\n\n\n<li>Control the addition and removal of child domains within the forest.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Default Location:<\/strong> The <strong>first domain controller<\/strong> in the forest root domain.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Domain-specific FSMO Roles<\/h3>\n\n\n\n<p><\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Relative ID (RID) Master<\/strong><\/h4>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Scope:<\/strong> Domain-level role.<\/li>\n\n\n\n<li><strong>Responsibilities:<\/strong>\n<ul class=\"wp-block-list\">\n<li>Allocates <strong>Relative ID (RID)<\/strong> pools to other domain controllers in the domain.<\/li>\n\n\n\n<li>RIDs are appended to the domain&#8217;s identifier to create unique <strong>Security Identifiers (SIDs)<\/strong> for AD objects like users, groups, and computers.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Default Location:<\/strong> The <strong>first domain controller<\/strong> in the domain.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">&nbsp;Primary Domain Controller (PDC) Emulator<\/h4>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Scope:<\/strong> Domain-level role.<\/li>\n\n\n\n<li><strong>Responsibilities:<\/strong>\n<ul class=\"wp-block-list\">\n<li>Acts as the <strong>time source<\/strong> for the domain to ensure Kerberos authentication functions correctly. It synchronize time for all computers within the domain.<\/li>\n\n\n\n<li>Handles password changes and user authentication across the domain.<\/li>\n\n\n\n<li>Provides backward compatibility for older systems and applications that rely on the concept of a Primary Domain Controller (PDC).<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Default Location:<\/strong> The <strong>first domain controller<\/strong> in the domain.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Infrastructure Master<\/h4>\n\n\n\n<p><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Scope:<\/strong> Domain-level role.<\/li>\n\n\n\n<li><strong>Responsibilities:<\/strong>\n<ul class=\"wp-block-list\">\n<li>Tracks and updates <strong>cross-domain references<\/strong> within a multi-domain environment, ensuring that references to objects (e.g., users or groups) in other domains remain consistent.<\/li>\n\n\n\n<li>Especially critical in environments with <strong>multiple domains<\/strong> and when users or groups reference objects in other domains.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Default Location:<\/strong> The <strong>first domain controller<\/strong> in the domain.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Lab Topology<\/h2>\n\n\n\n<p><\/p>\n\n\n\n<p>Before guiding you how to identifying Forest-wide and Domain-Specific FSMO Roles, take a look at the lab setup (<strong>techexample.local<\/strong>):<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Server<\/strong><\/td><td><strong>IP Address<\/strong><\/td><td><strong>Default Gateway<\/strong><\/td><\/tr><tr><td>DC01<\/td><td>192.168.1.100<\/td><td>192.168.1.254<\/td><\/tr><tr><td>WS01 (Secondary DC)<\/td><td>192.168.1.101<\/td><td>192.168.1.254<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>To learn how to setup this lab, go <a href=\"https:\/\/techlensfocus.com\/index.php\/2024\/12\/07\/mastering-windows-server-domain-controller-and-redundancy\/\" target=\"_blank\" rel=\"noopener\" title=\"\">here<\/a>. <\/p>\n\n\n\n<p>Let&#8217;s continue!<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Identify which Domain Controller Holds Schema Master Role<\/h2>\n\n\n\n<p><\/p>\n\n\n\n<p>Just a reminder, only one DC in the forest can hold the Schema Master role at a time. Here are the steps to identify:<\/p>\n\n\n\n<p><strong>Step 1: Register the Schema Management Console<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Log in to <strong>WS01<\/strong>, open Command Prompt and type the following:<\/li>\n<\/ul>\n\n\n\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"powershell\" data-enlighter-theme=\"\" data-enlighter-highlight=\"\" data-enlighter-linenumbers=\"false\" data-enlighter-lineoffset=\"\" data-enlighter-title=\"\" data-enlighter-group=\"\">regsvr32 schmmgmt.dll<\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Press <strong>Enter <\/strong>and click <strong>OK<\/strong>.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"451\" src=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/01.Schema-Master-1-1024x451.png\" alt=\"\" class=\"wp-image-2572\" style=\"width:681px;height:auto\" srcset=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/01.Schema-Master-1-1024x451.png 1024w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/01.Schema-Master-1-300x132.png 300w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/01.Schema-Master-1-768x338.png 768w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/01.Schema-Master-1.png 1100w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/div>\n\n\n<p><strong>Step 2: Open Microsoft Management Console (MMC)<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>After registering the Schema Management snap-in, type <strong>mmc <\/strong>in the Command Prompt and press Enter to open the MMC.<\/li>\n<\/ul>\n\n\n\n<p><strong>Step 3: Add the Active Directory Schema Snap-In<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>In the MMC, click on <strong>File <\/strong>&gt; <strong>Add\/Remove Snap-in<\/strong>.<\/li>\n\n\n\n<li>Choose <strong>Active Directory Schema <\/strong>and click <strong>Add<\/strong>.<\/li>\n\n\n\n<li>Click <strong>OK <\/strong>to close the snap-in window.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"405\" src=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/02.Schema-Master-2-1024x405.png\" alt=\"\" class=\"wp-image-2574\" style=\"width:657px;height:auto\" srcset=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/02.Schema-Master-2-1024x405.png 1024w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/02.Schema-Master-2-300x119.png 300w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/02.Schema-Master-2-768x304.png 768w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/02.Schema-Master-2.png 1026w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/div>\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"903\" height=\"497\" src=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/03.Schema-Master.png\" alt=\"\" class=\"wp-image-2575\" style=\"width:665px;height:auto\" srcset=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/03.Schema-Master.png 903w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/03.Schema-Master-300x165.png 300w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/03.Schema-Master-768x423.png 768w\" sizes=\"auto, (max-width: 903px) 100vw, 903px\" \/><\/figure><\/div>\n\n\n<p><strong>Step 4: Check the Schema Master Role<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Right-click <strong>Active Directory Schema<\/strong> in the MMC and select <strong>Operations Master<\/strong>. The Schema master role holder will be displayed here. In this case, the &#8220;Current schema master (online)&#8221; shows <strong>VM-DC01.techexample.local<\/strong>. The server VM-DC01 is currently reachable and functioning.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"462\" src=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/04.Schema-Master-4-1024x462.png\" alt=\"\" class=\"wp-image-2577\" style=\"width:667px;height:auto\" srcset=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/04.Schema-Master-4-1024x462.png 1024w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/04.Schema-Master-4-300x135.png 300w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/04.Schema-Master-4-768x347.png 768w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/04.Schema-Master-4.png 1159w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/div>\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"833\" height=\"398\" src=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/05.Schema-Master-5.png\" alt=\"\" class=\"wp-image-2578\" style=\"width:666px;height:auto\" srcset=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/05.Schema-Master-5.png 833w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/05.Schema-Master-5-300x143.png 300w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/05.Schema-Master-5-768x367.png 768w\" sizes=\"auto, (max-width: 833px) 100vw, 833px\" \/><\/figure><\/div>\n\n\n<p>Notice that both boxes show the same server name indicates that no role transfer is currently being performed.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Identify which Domain Controller Holds Domain Naming Master Role<\/h2>\n\n\n\n<p><\/p>\n\n\n\n<p>The Domain Naming Master role ensures no naming conflicts when adding or deleting domains. Below are the steps how to view it:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>We are still in <strong>WS01 <\/strong>server<strong>. <\/strong>Go to <strong>Start <\/strong>&gt; <strong>Administrative Tools <\/strong>&gt; <strong>Active Directory Domains and Trusts<\/strong><\/li>\n\n\n\n<li>Right-click the top node (techexample.local) and select <strong>Operations Master<\/strong><\/li>\n\n\n\n<li>In the <strong>Operations Master <\/strong>window, you will see the Domain Naming Master role displayed. The domain controller that currently holds this role will be listed.<\/li>\n<\/ul>\n\n\n\n<p>See screenshots below:<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"862\" height=\"434\" src=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/06.Domain-Naming-1.png\" alt=\"\" class=\"wp-image-2586\" style=\"width:646px;height:auto\" srcset=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/06.Domain-Naming-1.png 862w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/06.Domain-Naming-1-300x151.png 300w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/06.Domain-Naming-1-768x387.png 768w\" sizes=\"auto, (max-width: 862px) 100vw, 862px\" \/><\/figure><\/div>\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"423\" src=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/07.Domain-Naming-2-1024x423.png\" alt=\"\" class=\"wp-image-2588\" style=\"width:646px;height:auto\" srcset=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/07.Domain-Naming-2-1024x423.png 1024w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/07.Domain-Naming-2-300x124.png 300w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/07.Domain-Naming-2-768x317.png 768w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/07.Domain-Naming-2.png 1141w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/div>\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"851\" height=\"397\" src=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/08.Domain-Naming-3.png\" alt=\"\" class=\"wp-image-2589\" style=\"width:643px;height:auto\" srcset=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/08.Domain-Naming-3.png 851w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/08.Domain-Naming-3-300x140.png 300w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/08.Domain-Naming-3-768x358.png 768w\" sizes=\"auto, (max-width: 851px) 100vw, 851px\" \/><\/figure><\/div>\n\n\n<p>As you can see, the server <strong>VM-DC01.techexample.local<\/strong> is currently the Domain Naming Master for the AD forest. <\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How to view Domain-specific FSMO roles<\/h2>\n\n\n\n<p><\/p>\n\n\n\n<p>Now, we are moving to view the Domain-specific roles: <strong>RID Master<\/strong>, <strong>PDC Emulator <\/strong>and <strong>Infrastructure Master<\/strong>. <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>In <strong>WS01<\/strong> server, go to <strong>Start &gt; Administrative Tools &gt; Active Directory Users and Computers<\/strong>.<\/li>\n\n\n\n<li><strong>Right-click your domain<\/strong> and select <strong>Operations Master<\/strong>.<\/li>\n\n\n\n<li>In the <strong>Operations Master<\/strong> dialog, you will see <strong>three tabs<\/strong>:\n<ul class=\"wp-block-list\">\n<li><strong>RID<\/strong>: Displays the current holder of the <strong>RID Master<\/strong> role.<\/li>\n\n\n\n<li><strong>PDC<\/strong>: Displays the current holder of the <strong>PDC Emulator<\/strong> role.<\/li>\n\n\n\n<li><strong>Infrastructure<\/strong>: Displays the current holder of the <strong>Infrastructure Master<\/strong> role.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p>Here are the screenshots:<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"854\" height=\"432\" src=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/09.Domain-Specific-1.png\" alt=\"\" class=\"wp-image-2599\" style=\"width:666px;height:auto\" srcset=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/09.Domain-Specific-1.png 854w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/09.Domain-Specific-1-300x152.png 300w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/09.Domain-Specific-1-768x388.png 768w\" sizes=\"auto, (max-width: 854px) 100vw, 854px\" \/><\/figure><\/div>\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"481\" src=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/10.Domain-Specific-2-1024x481.png\" alt=\"\" class=\"wp-image-2600\" style=\"width:666px;height:auto\" srcset=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/10.Domain-Specific-2-1024x481.png 1024w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/10.Domain-Specific-2-300x141.png 300w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/10.Domain-Specific-2-768x361.png 768w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/10.Domain-Specific-2.png 1155w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/div>\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"915\" height=\"443\" src=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/11.Domain-Specific-3.png\" alt=\"\" class=\"wp-image-2602\" style=\"width:667px;height:auto\" srcset=\"https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/11.Domain-Specific-3.png 915w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/11.Domain-Specific-3-300x145.png 300w, https:\/\/techlensfocus.com\/wp-content\/uploads\/2024\/12\/11.Domain-Specific-3-768x372.png 768w\" sizes=\"auto, (max-width: 915px) 100vw, 915px\" \/><\/figure><\/div>\n\n\n<p>If you click on each tab, you will see the current Operation Master role is held by <strong>VM-DC01<\/strong>. This server is in the<strong> techexample.local <\/strong>domain.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p><\/p>\n\n\n\n<p>To sum up,  we&#8217;ve focused on viewing FSMO role holders, which is the first step before any potential transfer or troubleshooting. Being aware of these roles and knowing how to view them will help you maintain a healthy and functional Active Directory infrastructure.<\/p>\n\n\n\n<p>Stay tuned for our next blog, where we will dive into how to transfer FSMO roles when needed.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Managing FSMO roles for Active Directory administrators. This involves knowing which server holds each role in order to maintain a healthy directory.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[6,18],"tags":[83,82,86,27],"class_list":["post-2524","post","type-post","status-publish","format-standard","hentry","category-it","category-windowserver","tag-active-directory","tag-domain-controller","tag-fsmo-roles","tag-windows-server"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/techlensfocus.com\/index.php\/wp-json\/wp\/v2\/posts\/2524","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techlensfocus.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techlensfocus.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techlensfocus.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/techlensfocus.com\/index.php\/wp-json\/wp\/v2\/comments?post=2524"}],"version-history":[{"count":74,"href":"https:\/\/techlensfocus.com\/index.php\/wp-json\/wp\/v2\/posts\/2524\/revisions"}],"predecessor-version":[{"id":2617,"href":"https:\/\/techlensfocus.com\/index.php\/wp-json\/wp\/v2\/posts\/2524\/revisions\/2617"}],"wp:attachment":[{"href":"https:\/\/techlensfocus.com\/index.php\/wp-json\/wp\/v2\/media?parent=2524"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techlensfocus.com\/index.php\/wp-json\/wp\/v2\/categories?post=2524"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techlensfocus.com\/index.php\/wp-json\/wp\/v2\/tags?post=2524"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}