Active Directory: Knowledge – Required FSMO Role to join new Domain Controller under Child Domain

This tutorial is for ADDS knowledge to understand the essential role that must be online for Domain Controller to join successfully.

The test consists of pre-configured domain with child domain as follows:

Domain Controller
FSMO Roles
DC1.test.local PDC Emulator
Infrastructure Master
RID Master
DC2.test.local Domain Naming Master
Schema Master
DC3.corp.test.local PDC Emulator
Infrastructure Master
RID Master
DC4.corp.test.local GC


In this test, I will join new server DC5 under child domain “corp.test.local”.


First, we need to check FSMO roles by logging the current DC and execute ntdsutil command:

ntdsutil Roles Connections “Connect to server %LogonServer%” Quit “Select Operation Target” “List roles for conn server” Quit Quit Quit

 

DC
NTDSUTIL Output
DC1
ntdsutil: Roles
fsmo maintenance: Connections
server connections: Connect to server \\DC1
Binding to \\DC1 …
Connected to \\DC1 using credentials of locally logged on user.
server connections: Quit
fsmo maintenance: Select Operation Target
select operation target: List roles for conn server
Server “\\DC1” knows about 5 roles
Schema – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Naming Master – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
PDC – CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
RID – CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Infrastructure – CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
select operation target: Quit
fsmo maintenance: Quit
ntdsutil: Quit
DC2
ntdsutil: Roles
fsmo maintenance: Connections
server connections: Connect to server \\DC2
Binding to \\DC2 …
Connected to \\DC2 using credentials of locally logged on user.
server connections: Quit
fsmo maintenance: Select Operation Target
select operation target: List roles for conn server
Server “\\DC2” knows about 5 roles
Schema – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Naming Master – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
PDC – CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
RID – CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Infrastructure – CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
select operation target: Quit
fsmo maintenance: Quit
ntdsutil: Quit
DC3
ntdsutil: Roles
fsmo maintenance: Connections
server connections: Connect to server \\DC3
Binding to \\DC3 …
Connected to \\DC3 using credentials of locally logged on user.
server connections: Quit
fsmo maintenance: Select Operation Target
select operation target: List roles for conn server
Server “\\DC3” knows about 5 roles
Schema – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Naming Master – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
PDC – CN=NTDS Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
RID – CN=NTDS Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Infrastructure – CN=NTDS Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
select operation target: Quit
fsmo maintenance: Quit
ntdsutil: Quit
DC4
ntdsutil: Roles
fsmo maintenance: Connections
server connections: Connect to server \\DC4
Binding to \\DC4 …
Connected to \\DC4 using credentials of locally logged on user.
server connections: Quit
fsmo maintenance: Select Operation Target
select operation target: List roles for conn server
Server “\\DC4” knows about 5 roles
Schema – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Naming Master – CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
PDC – CN=NTDS Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
RID – CN=NTDS Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
Infrastructure – CN=NTDS Settings,CN=DC3,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test,DC=local
select operation target: Quit
fsmo maintenance: Quit
ntdsutil: Quit



Test Table 

Test: Join new server DC5 into Child Domain corp.test.local on DC3 and DC3 is unavailable

Set DC to Offline
Result
DC1.test.local Pass
DC2.test.local Pass
DC3.corp.test.local Fail

adds8

 

Updated: 18/12/2014 — 11:05 AM

Leave a Reply

Your email address will not be published. Required fields are marked *