Move Operations Master Roles by ntdsutil
What would happen if we didn't either use dcpromo to demote the first domain controller before removing it from the domain or move each Operations Master role seperately before removing the computer?
We could use command line tool to assign the Operations Master roles to a new DC.
- Log on to a member server or domain controller with an administrator account.
- Click “Start”, click “run”, and enter “cmd“
- Enter “ntdsutil“
- Enter “roles“
- Enter “connections“
- Enter “connect to server [ServerName]“
- Enter “quit“ to return to the roles level
- Enter “transfer [RoleName] “
- Click “Yes“ on the confirmation dialog
The commend line tool ntdsutil will then transfer the specific role to the specific domain controller. The figure below shows an example.