FSMO Roles (Flexible Single Master Operations)
https://learn.microsoft.com/de-de/troubleshoot/windows-server/identity/view-transfer-fsmo-roles
# Schema Master
# Domain Naming Master
# InfrastructureMaster
# Relative ID (RID)-Master
# PDC-Emulator
## queries on command line
# register Schmmgmt.dll
regsvr32 schmmgmt.dll
# make sure the replication is valid
Repadmin /replsummary
# ntdsutil
ntdsutil
connect to <serverDNSNameOfServer>
Check duplicate sid
# query FSMO Roles
# https://ss64.com/nt/netdom.html
netdom query fsmo
Dsquery server -hasfsmo pdc
Dsquery server -hasfsmo rid
Dsquery server -hasfsmo infr
Dsquery server -hasfsmo schema
Dsquery server -hasfsmo name
## queries with powershell
#
Get-ADDomainController -Discover -Service TimeService, GlobalCatalog
# List all domain controllers (with full details)
Get-ADDomainController -Filter *
Get-ADDomainController -Filter *| %{$_.Name + ": " + $_.OperationMasterRoles + "`n"}
Get-ADDomainController -filter * | Select-Object name
Get-ADDomainController -Filter {OperationMaster-Roles -like "PDC*"}
Get-ADDomainController -Filter {OperationMaster-Roles -like "PDC*"} | fl Hostname, OperationMasterroles
Get-ADComputer (Get-ADDomainController -Discover -Service
"PrimaryDC").Name -Pro-perty * | fl
DNSHostname,OperatingSystem,OperatingSystemVersion
## list certain role DCs
# on the first DC
Get-ADDomain | Select PDCEmulator, RIDMaster, InfrastructureMaster
# on other DCs
Get-ADForest | Select-Object DomainNamingMaster, SchemaMaster
# Functional level for forest and domain
Get-ADForest | Select ForestMode
# or
Get-ADDomain | select DomainMode
#
Get-ADDomain | Select-Object InfrastructureMaster, RIDMaster, PDCEmulator
Get-ADForest | Select-Object DomainNamingMaster, SchemaMaster
Get-ADDomainController -Filter *
| Select-Object Name, Domain, Forest, OperationMasterRoles
| Where-Object {$_.OperationMasterRoles}
| Format-Table -AutoSize