Find FSMO Roles for a DC

Oh the sexy world of server management.  Here is a gem for you…how do you find out the FSMO roles of a server (domain controller) if you didn’t build that server?

It’s pretty easy:

Windows 2000/2003 Active Directory domains utilize a Single Operation Master method called FSMO (Flexible Single Master Operation)

The five FSMO roles are:

• Schema master – Forest-wide and one per forest.
• Domain naming master – Forest-wide and one per forest.
• RID master – Domain-specific and one for each domain.
• PDC – PDC Emulator is domain-specific and one for each domain.
• Infrastructure master – Domain-specific and one for each domain.

Usually, the roles are all on the same server, but sometimes an administrator will have these roles split and some will be on one domain controller and some on another.

While there are several methods you can use to find the FSMO role holders for a particular server, the quick and dirty way to find out is to use the Ntdsutil prompt.

1. On any domain controller: START–>RUN and type “Ntdsutil” and then press OK
2. At the ntdsutil prompt, type “roles” and ENTER
3. At the fsmo maintenance prompt, type “connections” and ENTER
4. At the server connections prompt, type “connect to <servername>” and ENTER  (where <servername> is the name of the server to administer)
5. The screen will tell you if you are connected to the server…once you’re back at the server connections prompt, type “q” and ENTER
6. At the fsmo maintenance prompt, type “select operation target” and ENTER
7. At the select operation target prompt, type “List roles for connected server” and ENTER
8. Take note of the roles on the server…
9. Type “q” three times to exit the command prompts…you’re done.

For more methods (with photos and everything!) and to find scripts which may make your life easier if you do this kind of work all the time, please click here.