Moving a s4 DC to a different host

Andrew Bartlett abartlet at
Wed Oct 17 00:13:25 MDT 2012

On Wed, 2012-10-17 at 07:50 +0200, Marc Muehlfeld wrote:
> Am 17.10.2012 04:59, schrieb Andrew Bartlett:
> > Pretty much.  You may need to move the fsmo roles across before the
> > demote, otherwise it can fail.
> Thanks for that information.
> But I have some more questions:
> - Can this only be done on windows side via ntdsutil.exe? Or on samba side, too?

samba-tool fsmo will help.

> - If I see later on windows side the new server name for all 5 owners in the 
> output of "netdom query /domain:... fsmo", then everything is successfully?

I'm not familiar with the tool, but that sounds plausible.

> - Is there anything I have to consider about DNS? Or do the IP of the new DC 
> is automatically added to samba4/bind when I join and the one of the old DC is 
> removed on demote?

DNS may need some work, we won't remove the old names. 

> PS: Of course I'll add all the steps later to the wiki, if I had successfully 
> moved the DC, for documentation.


Andrew Bartlett

Andrew Bartlett                      
Authentication Developer, Samba Team 

More information about the samba-technical mailing list