DSQuery shows wrong DC for FSMO

  • Thread starter Thread starter Damian Scoles
  • Start date Start date
D

Damian Scoles

I am working on a test lab (just built between today and
yesterday). I have 2 DC's, DC1 and DC2. I just moved the
FSMO roles to even them out a bit. This is how they are
right now:

DC1 - PDC, SCHEMA, and GC (I know this is not a FSMO)
DC2 - RID, NAME, INFRA

My only problem is that DSQuery shows DC1 as the holder of
the Infrastructure role. However, if I go to AD Users and
Computers I see DC2 as the holder of that role. I looked
in the even log and both servers have an events 1458, 836,
837 and 566 relating to this move. There are no errors
after this move. Do I need to force a replication? I made
the role change 90 minutes ago.

What's weird is that I just ran the Replmon tool from
Support tools and it shows (when run form BOTH servers)
that DC2 is the Infrastructure Manager. I even clicked the
query button and it says that it can verify the role.
Also, I tried to force synchronization using
Repadmin /syncall from both servers, replicating to the
other and it comes back with no errors. I then rerun the
query (dsquery) and it still lists DC1 as the
Infrastructure Master. Where does dsquery get its
information from? This may help with troubleshooting.
Also, both servers are DNS servers. Thanks.
 
If you are not getting any errors it's probably just
timing. You can try to force replication and you can also
run ipconfig /registerDNS on both machines. That will
update the machines DNS records in the DNS database. Or
just check it again in an hour or so to see if has updated
on it's own.

Michael
 
That is very odd. dsquery.exe uses the same code to determine the FSMO
holder that Active Directory Users & Computers (ADUC) does. Can you use
the -server switch to target the command to DC1 and then run it again
targetting to DC2 and let me know what happens?
 
How do I "target" a particular DC. HEre is what I have
been running on both servers:

dsquery server -hasfsmo infr

What other options would you like run? Thanks.

Damian
-----Original Message-----
That is very odd. dsquery.exe uses the same code to determine the FSMO
holder that Active Directory Users & Computers (ADUC) does. Can you use
the -server switch to target the command to DC1 and then run it again
targetting to DC2 and let me know what happens?

--
Jeff Jones [MS]
Active Directory Administration Tools Development
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.



Damian Scoles said:
I am working on a test lab (just built between today and
yesterday). I have 2 DC's, DC1 and DC2. I just moved the
FSMO roles to even them out a bit. This is how they are
right now:

DC1 - PDC, SCHEMA, and GC (I know this is not a FSMO)
DC2 - RID, NAME, INFRA

My only problem is that DSQuery shows DC1 as the holder of
the Infrastructure role. However, if I go to AD Users and
Computers I see DC2 as the holder of that role. I looked
in the even log and both servers have an events 1458, 836,
837 and 566 relating to this move. There are no errors
after this move. Do I need to force a replication? I made
the role change 90 minutes ago.

What's weird is that I just ran the Replmon tool from
Support tools and it shows (when run form BOTH servers)
that DC2 is the Infrastructure Manager. I even clicked the
query button and it says that it can verify the role.
Also, I tried to force synchronization using
Repadmin /syncall from both servers, replicating to the
other and it comes back with no errors. I then rerun the
query (dsquery) and it still lists DC1 as the
Infrastructure Master. Where does dsquery get its
information from? This may help with troubleshooting.
Also, both servers are DNS servers. Thanks.
Click to expand...


.
Click to expand...
 
Ultimately it's pulling this information from the AD so depending upon
whether your DC's have replicated would be why your seeing different values.
You can verify the values of these attributes in the AD on each indivdual DC
the FSMO values are stored at the locations below. The fact that they are
not even wont prevent you from replicating as once they do replicate the
values will be updated on the machine who isnt up-to-date.

| Role | Object |

| PDC emulator | DC=domain,DC=com |

| RID master | CN=Rid Manager$,CN=System,DC=domain,DC=com |

| Schema master | CN=Schema,CN=Configuration,DC=domain,DC=com |

| Infrastructure | CN=Infrastructure,DC=domain,DC=com |

| Domain naming master | CN=Partitions,CN=Configuration,DC=domain,DC=com |
 
Back
Top