Prices Excluding VATPrices Including VAT

Basket

How To

Transferring management of an Active Directory Domain to another Domain Controller

By August 15, 2019 No Comments

Step 1: Using command line to move PDC to another Domain Controller

  1. Open Command Prompt (elevated) and Type: ntdsutil
  2. At the ntdsutil command prompt, type: roles
  3. At the fsmo maintenance command prompt, type: connection
  4. At the server connections command prompt, type: connect to server DomainControllerName
  5. At the server connections command prompt, type: quit
  6. At the fsmo maintenance command prompt, type:
    transfer RID master
    transfer PDC
    transfer infrastructure master
    transfer naming master
    transfer schema master
  7. Quit, then to update group policy, open a Run prompt and type: gpupdate /force

 

Step 2: Demote the old Domain Controller

  1. (Optional if using SBS11 for example) Remove Active Directory Certificate Services
    Server manager > Manage > Remove roles > Next > Active Directory Certificate Services > Next > Confirm Removal option > Remove
    (This is marginally different between Server 2008r2 and Server 2012 onwards)
  2. Windows 2003 to 2008r2: Open a Run prompt and type: dcpromo
    (Don’t tick the box saying this is the last server on the domain)
    or
    Windows 2012 onwards: Open PowerShell and type: Uninstall ADDSDomainController
    After a reboot, then reopen PowerShell and type: Uninstall WindowsFeature AD Domain Services

 

Step 3: Cleaning up AD (Only if removing the old server from the Domain)

  1. If the old Domain Controller computer name still exist in the Users and Computers or Sites and Services console, delete it manually.
  2. Delete entries pointing to old Domain Controller in DNS. Look in forwarders, name servers in forward look up zone and reverse look up zone.

Leave a Reply