how to change the role owner of the operations master

[dc3dog]

How do I change the role of the Operations Master?

The Schema master, Domain naming master, and RID master
server has failed and cannot be restored. I would like to
move these roles to the current PDC master, Infrastructure
master server.

I have reviewed the following KB articles but I am at a
loss as to exactly how or where these changes need to be
made. Specifically where exaclty are these objects:

RID master CN=Rid Manager$,CN=System,DC=domain,DC=com
Schema master CN=Schema,CN=Configuration,DC=domain,DC=com
Domain naming master
CN=Partitions,CN=Configuration,DC=domain,DC=com

Or am I getting ahead of myself? What exactly is the
definition of a successful seizure and how would I
accomplish it?

Thanks

ref:
Flexible Single Master Operation Transfer and Seizure
Process 223787
HOW TO: Change the Role Owner of the Operations Master
After a Successful Seizure 283595

 

[Cary Shultz [A.D. MVP]]

DC3DOG,

I assume that you have multiple DCs. It seems from what you have written
that the first DC holds the two forest-wide fsmo roles as well as the RID
Master. Furthermore, it seems that the second DC holds the other two
domain-wide fsmo roles.

First things first - it is often suggested that the DC that holds the RID
Master also hold the PDC Emulator role. In other words, keep these two
together.

Now, in order to transfer - or in your specific case SEIZE - the three roles
you need to take a look at the following MSKB Article:

http://support.microsoft.com/default.aspx?scid=kb;en-us;255504&Product=win2000

Just for good measure here is the MSKB Article that explains how to do this
using the various MMCs ( Active Directory Users and Computers, Active
Directory Domain and Trusts and Active Directory Schema ) once this
situation is resolved and you have another DC in the mix:

http://support.microsoft.com/default.aspx?scid=kb;en-us;255690&Product=win2000

It talks about a utility called ntdsutil. I always install the Support
Tools on every WIN2000 Server that I install so I am not sure right now if
ntdsutil is available on WIN2000 servers 'out of the box'. Simply go to a
command prompt and enter 'ntdsutil /?' and if you are given the syntax then
it is available 'out of the box'. If you are given an error message then
install the Support Tools. The Support Tools can be found in two places: on
the WIN2000 Server CD in the Support | Tools folder or on the WIN2000
Service Pack CD in the Support | Tools folder. I always try to use the
Service Pack CD. You can also download them from
http://www.microsoft.com/downloads. There are several extremely useful
utilities that are included with the Support Tools in addition to the
ntdsutil utility.

This is just the first step in your process. It will take care of seizing
the three FSMO Roles that were held by that dead DC.

You also might want to take a look at the following MSKB Article, which will
explain the process of removing that dead DC from AD ( otherwise you will
have a lot of replication issues as well as a few other things ) by using
the now familiar tool ntdsutil. You will then need to use adsiedit ( a part
of the Support Tools ) to clean things up. I would also make sure that DNS
is correct and that all references to that dead DC are removed.

http://support.microsoft.com/default.aspx?scid=kb;en-us;216498&Product=win2000

That would be step two. The next step is to make sure that you make the
surviving DC a DNS Server ( if it is not already ) as well as a Global
Catalog Server. Here is a MSKB Article on how to do that:

http://support.microsoft.com/default.aspx?scid=kb;en-us;313994&Product=win2000

I would then make sure that if you are using DHCP ( either WIN2000 or your
Firewall, for example ) that you update the information that it is going to
hand out to the clients when giving them their IP Address leases.

HTH,

Cary