Domain Controller FSMO Role Holders, Transfer and Demote

2016/04/17 18:43
List of useful resources and brief information

Determining FSMO Role Holders

Netdom (part of Windows server support tools)

netdom query /domain:<myDomainName> fsmo


Demote a domain controller

To demote a domain controller

  1. On a domain controller, click Start, and then click Run.
  2. In Open, type dcpromo to open the Active Directory Installation Wizard, and then click Next.
  3. On the Remove Active Directory page, click Next, and then continue to follow the wizard.


Domain controllers do not demote gracefully ... in Windows Server 2003 and in Windows 2000 Server


Quick diagnostics on Active Directory domain

Install support tools (if not already installed). Use Windows server installation disk.
d:\support\tools\setup.exe

Domain diagnostics

  • dcdiag /v /c /d e/ /s:myDCname > c:\temp\dcdiag.log
  • netdiag /v > c:\temp\netdiag.log (On each dc)
  • repadmin /showrepl dc* /verbose /all /intersite > c:\temp\repl.txt
  • dnslint /ad /s "ip address of your dc"

How to view and transfer FSMO roles in the graphical user interface