Any risks of changing master roles of Active Directory?

active-directory windows-server-2016 windows-server-2012

If your AD replication is working correctly, there is no risk at all; use dcdiag and repadmin to check everything is working correctly before moving a FSMO role, and make sure all DCs are online so that they can properly acknowledge the change.

Also, make sure the server that will hold the PDC Emulator role has correct time settings, because it will become the authoritative time source for the domain.


You'll probably need to manually reconfigure the Windows Time service on the new PDCe and the old PDCe. You can run the commands below in an elevated command prompt on the respective servers to make this change.

New PDCe

net stop w32time

w32tm /unregister

w32tm /register

net start w32time

w32tm.exe /config /manualpeerlist:time.windows.com /syncfromflags:manual /reliable:YES /update

net stop w32time

net start w32time

Old PDCe

net stop w32time

w32tm /unregister

w32tm /register

net start w32time

w32tm /config /syncfromflags:DOMHIER /update

net stop w32time

net start w32time

Related

Ipset with Iptables with large list of IP ranges (CIDR)
Why does two different interfaces on the same machine result in two different MAC addresses?
Overriding individual websites hosted in NGINX to show a Maintenance Page
Why does my VPN add its own IP address range to my routing table with local gateway?
Hitch installation completed with insserv errors. Unable to start hitch
How does a router with DHCP and a custom DNS set deal with client DNS settings?
OpenVPN easy-rsa: Common Name set at vars
How to set hostname if hosting multiple servers on the same machine?
Samba Read-only shadow copies
running syslog-ng in verbose mode
Foreman displays a server as "out of sync", what could be the reason and what is the right way to troubleshoot such an issue?
Move files with extension in diffrent structure