This tutorial is for ADDS knowledge to understand the essential role that must be online for Domain Controller to join successfully.
The test consists of pre-configured domain with child domain as follows:
Domain Controller
|
FSMO Roles
|
DC1.test.local | PDC Emulator Infrastructure Master RID Master |
DC2.test.local | Domain Naming Master Schema Master |
DC3.corp.test.local | PDC Emulator Infrastructure Master RID Master |
DC4.corp.test.local | GC |
In this test, I will join new server DC5 under child domain “corp.test.local”.
First, we need to check FSMO roles by logging the current DC and execute ntdsutil command:
ntdsutil Roles Connections “Connect to server %LogonServer%” Quit “Select Operation Target” “List roles for conn server” Quit Quit Quit
DC
|
NTDSUTIL Output
|
DC1
|
ntdsutil: Roles
fsmo maintenance: Connections
server connections: Connect to server \\DC1
Binding to \\DC1 …
Connected to \\DC1 using credentials of locally logged on user.
server connections: Quit
fsmo maintenance: Select Operation Target
select operation target: List roles for conn server
Server “\\DC1” knows about 5 roles
Schema – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Naming Master – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
PDC – CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
RID – CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Infrastructure – CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
select operation target: Quit
fsmo maintenance: Quit
ntdsutil: Quit
|
DC2
|
ntdsutil: Roles
fsmo maintenance: Connections
server connections: Connect to server \\DC2
Binding to \\DC2 …
Connected to \\DC2 using credentials of locally logged on user.
server connections: Quit
fsmo maintenance: Select Operation Target
select operation target: List roles for conn server
Server “\\DC2” knows about 5 roles
Schema – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Naming Master – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
PDC – CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
RID – CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Infrastructure – CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
select operation target: Quit
fsmo maintenance: Quit
ntdsutil: Quit
|
DC3
|
ntdsutil: Roles
fsmo maintenance: Connections
server connections: Connect to server \\DC3
Binding to \\DC3 …
Connected to \\DC3 using credentials of locally logged on user.
server connections: Quit
fsmo maintenance: Select Operation Target
select operation target: List roles for conn server
Server “\\DC3” knows about 5 roles
Schema – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Naming Master – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
PDC – CN=NTDS Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
RID – CN=NTDS Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Infrastructure – CN=NTDS Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
select operation target: Quit
fsmo maintenance: Quit
ntdsutil: Quit
|
DC4
|
ntdsutil: Roles
fsmo maintenance: Connections
server connections: Connect to server \\DC4
Binding to \\DC4 …
Connected to \\DC4 using credentials of locally logged on user.
server connections: Quit
fsmo maintenance: Select Operation Target
select operation target: List roles for conn server
Server “\\DC4” knows about 5 roles
Schema – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Naming Master – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
PDC – CN=NTDS Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
RID – CN=NTDS Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Infrastructure – CN=NTDS Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
select operation target: Quit
fsmo maintenance: Quit
ntdsutil: Quit
|
Test Table
Test: Join new server DC5 into Child Domain corp.test.local on DC3 and DC3 is unavailable
Set DC to Offline
|
Result
|
DC1.test.local | Pass |
DC2.test.local | Pass |
DC3.corp.test.local | Fail |