Move the operation master role to an AD directory server.

      Move-ADDirectoryServer [-Identity] ADDirectoryServer
         [-Site] ADSite [-AuthType {Negotiate | Basic}] [-Credential PSCredential]
            [-Server string] [-Confirm] [-WhatIf] [CommonParameters]

   -AuthType {Negotiate | Basic}
       The authentication method to use:
          Negotiate or 0
          Basic or 1
       A Secure Sockets Layer (SSL) connection is required for the Basic authentication method.

   -Credential PSCredential
       A user account that has permission to perform this action.
       The default is the current user unless the cmdlet is run from an AD PowerShell provider drive
       in which case the account associated with the drive is the default.

       "User64" or "Domain01\User64" or a PSCredential object.


   -Identity ADDirectoryServer
       An AD server object:

        Distinguished Name of the NTDS Settings object
          Example: CN=NTDS Settings,CN=DC064,CN=Servers,CN=eame,CN=Sites,CN=Configuration,DC=corp,DC=SS64,DC=com

        Distinguished Name of the server object that represents the directory server
          Example: CN=DC064,CN=Servers,CN=eame,CN=Sites,CN=Configuration,DC=corp,DC=SS64,DC=com

        GUID (objectGUID) of server object under the configuration partition
          Example: a7ca1c0d-9a72-497b-a1c2-209104124102

        GUID (objectGUID) of NTDS settings object under the configuration partition
          Example: 768c44de-f72d-66e0-8a88-0523ca495f20

       The identifier in parentheses is the LDAP provider name for the attribute.

       The cmdlet searches the default naming context or partition to find the object.
       If the identifier given is a DN, the partition to search will be computed from that DN.
       If two or more objects are found, the cmdlet returns a non-terminating error.

       This parameter can also accept an object through the pipeline.

   -Server string
       The AD Domain Services instance to connect to, this may be any of: AD Lightweight Domain Services,
       AD Domain Services or Active Directory Snapshot instance.

       Examples:  demo

   -Site ADSite
       The new site for the directory server.
       Identify the site by one of the following property values.

          Distinguished name (DN)
            Example: CN=eame,CN=Sites,CN=Configuration,DC=corp,DC=SS64,DC=com
          GUID (ObjectGUID)
           Example: 1db4e219-78df-437c-a160-bf2a734fff79
          Name (name)
            Example: eame

       The identifier in parentheses is the LDAP provider name for the attribute.

       Prompt for confirmation before executing the command.

       Describe what would happen if you executed the command, without actually executing the command.

Move-ADDirectoryServer moves a directory server in Active Directory to a new site within the same domain.

The -Identity parameter specifies the directory server to move. Specify a directory server object with the DN or objectGUID of the NTDS Settings object or the server object that represents the directory server. Alternatively set the -Identity parameter to a directory server object variable or by passing an object through the pipeline. For example, from Get-ADDomainController


Move the domain controller "SS64-DC5" to the site "Bernastrasse Berne":

PS C:\> Move-ADDirectoryServer -Identity "SS64-DC5" -Site "Bernastrasse Berne"

Move all Read Only Domain Controllers to the site "RODC-Bernastrasse":

PS C:\> Get-ADDomainController -Filter {IsReadOnly -eq $true} | Move-ADDirectoryServer -site "RODC-Bernastrasse"

“The horse, the horse! The symbol of surging potency and power of movement, of action” ~ D.H. Lawrence

Related PowerShell Cmdlets

Move-adDirectoryServerOperationMasterRole - Move the operation master (FSMO) roles to an AD domain controller.
Set-adDomainMode - Set the domain functional level for an AD domain.

Copyright © 1999-2023
Some rights reserved