Move the operation master role to an AD directory server.
Syntax
Move-ADDirectoryServer [-Identity] ADDirectoryServer
[-Site] ADSite [-AuthType {Negotiate | Basic}] [-Credential PSCredential]
[-Server string] [-Confirm] [-WhatIf] [CommonParameters]
Key
-AuthType {Negotiate | Basic}
The authentication method to use:
Negotiate or 0
Basic or 1
A Secure Sockets Layer (SSL) connection is required for the Basic authentication method.
-Credential PSCredential
A user account that has permission to perform this action.
The default is the current user unless the cmdlet is run from an AD PowerShell provider drive
in which case the account associated with the drive is the default.
"User64" or "Domain01\User64" or a PSCredential object.
-Force
-Identity ADDirectoryServer
An AD server object:
Distinguished Name of the NTDS Settings object
Example: CN=NTDS Settings,CN=DC064,CN=Servers,CN=eame,CN=Sites,CN=Configuration,DC=corp,DC=SS64,DC=com
Distinguished Name of the server object that represents the directory server
Example: CN=DC064,CN=Servers,CN=eame,CN=Sites,CN=Configuration,DC=corp,DC=SS64,DC=com
GUID (objectGUID) of server object under the configuration partition
Example: a7ca1c0d-9a72-497b-a1c2-209104124102
GUID (objectGUID) of NTDS settings object under the configuration partition
Example: 768c44de-f72d-66e0-8a88-0523ca495f20
The identifier in parentheses is the LDAP provider name for the attribute.
The cmdlet searches the default naming context or partition to find the object.
If the identifier given is a DN, the partition to search will be computed from that DN.
If two or more objects are found, the cmdlet returns a non-terminating error.
This parameter can also accept an object through the pipeline.
-Server string
The AD Domain Services instance to connect to, this may be any of: AD Lightweight Domain Services,
AD Domain Services or Active Directory Snapshot instance.
Examples: demo.SS64.com demo demoDC02.demo.ss64.com demoDC02.demo.ss64.com:3268
-Site ADSite
The new site for the directory server.
Identify the site by one of the following property values.
Distinguished name (DN)
Example: CN=eame,CN=Sites,CN=Configuration,DC=corp,DC=SS64,DC=com
GUID (ObjectGUID)
Example: 1db4e219-78df-437c-a160-bf2a734fff79
Name (name)
Example: eame
The identifier in parentheses is the LDAP provider name for the attribute.
-Confirm
Prompt for confirmation before executing the command.
-WhatIf
Describe what would happen if you executed the command, without actually executing the command.
Move-ADDirectoryServer moves a directory server in Active Directory to a new site within the same domain.
The -Identity parameter specifies the directory server to move. Specify a directory server object with the DN or objectGUID of the NTDS Settings object or the server object that represents the directory server. Alternatively set the -Identity parameter to a directory server object variable or by passing an object through the pipeline. For example, from Get-ADDomainController
Move the domain controller "SS64-DC5" to the site "Bernastrasse Berne":
PS C:\> Move-ADDirectoryServer -Identity "SS64-DC5" -Site "Bernastrasse Berne"
Move all Read Only Domain Controllers to the site "RODC-Bernastrasse":
PS C:\> Get-ADDomainController -Filter {IsReadOnly -eq $true} | Move-ADDirectoryServer -site "RODC-Bernastrasse"
“The horse, the horse! The symbol of surging potency and power of movement, of action” ~ D.H. Lawrence
Move-adDirectoryServerOperationMasterRole - Move the operation master (FSMO) roles to an AD domain controller.
Set-adDomainMode - Set the domain functional level for an AD domain.