Different ways of discovering which DCs hold which roles

Via the Command Line

Windows 2000 & 2003

netdom query fsmo [/domain:< dns domain-name="" >]

ntdsutil "roles" "connections" "connect to server < domain-name.com >" "quit" 
 "select operation target" "list roles for connected server"

dcdiag /test:knowsofroleholders /v [/s:< dc hostname="" >]

 

Windows 2003

dsquery server -hasfsmo < role >
 

Via Script

' **************************************************************************
' getFSMORoles.vbs
' 
' Paul Williams, msresource.net, March 2005
' 
' Simple script that pulls and outputs the FSMO roles from AD
' 
' 
' Author:  Paul Williams
' Date:  09-04-2005
' Version: 1.1.2.
' 
' Last Updated:01-05-2005
' 
' 
' USEAGE:
' 
'  cscript [wscript] getFSMORoles.vbs
' 
' 
' This script simply binds to the local domain, and reads the FSMO role 
' holders from Active Directory and then outputs them.
' 
' This script needs to be run by a user with permissions to read all 
' naming contexts.
' 
' ************************************************************************** 
Option Explicit 

dim objRootDse,objSchema,objDomName,objPDC,objRID,objInfrastructure 

set objRootDse=getObject("LDAP://RootDSE") 
set objPDC=getObject("LDAP://" & objRootDse.get("defaultNamingContext"))
set objRID=getObject("LDAP://cn=RID Manager$,cn=system," & objRootDse.get("defaultNamingContext"))
set objSchema=getObject("LDAP://" & objRootDse.get("schemaNamingContext"))
set objInfra=getObject("LDAP://cn=Infrastructure," & objRootDse.get("defaultNamingContext"))
set objDomName=getObject("LDAP://cn=Partitions," & objRootDse.get("configurationNamingContext"))

echo"Schema Master: " & objSchema.fsmoroleowner
echo"Domain Naming Master: " & objDomName.fsmoroleowner 
echo"PDC Emulator: " & objPDC.fsmoroleowner
echo"RID Master: " & objRID.fsmoroleowner
echo"Infrastructure Master: " & objInfrastructure.fsmoroleowner 


' *********************************************************************
' echo(string messageToEcho)
' 
' Sub routine simply echos the passed string.
' Sub used for outputting all information to the screen/ console
'
' *********************************************************************
Private Sub echo(strMessage)
	wscript.echo strMessage
End Sub 

Via the GUI

PDCe, RID, and IM

• Open Active Directory Users and Computers (start\ run\ dsa.msc)
• Right-click on the Active Directory Users and Computers icon in the top left of the left pane and click Operations Masters
• There are three tabs, one for each domain-based FSMO role. Each tab displays the current FSMO role holder and gives you the ability to change it to the DC with which the snap-in is focused.
  

Domain Naming

• Open Active Directory Domains and Trusts (start\ run\ domain.msc)
• Right-click Active Directory Domains and Trusts in the top left of the left pane and click Operations Masters
  

Schema

• Open the Active Directory Schema snap-in* (start\ run\ schmmgmt.msc)
• Right-click Active Directory Schema in the top left of the left pane and click Operations Masters

Document information

---