echochio

root@zentyal-ad:~# samba-tool fsmo show
params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf"
ldb_wrap open of secrets.ldb
InfrastructureMasterRole owner: CN=NTDS Settings,CN=WIN-AD1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
RidAllocationMasterRole owner: CN=NTDS Settings,CN=WIN-AD1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
PdcEmulationMasterRole owner: CN=NTDS Settings,CN=WIN-AD1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
DomainNamingMasterRole owner: CN=NTDS Settings,CN=WIN-AD1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
SchemaMasterRole owner: CN=NTDS Settings,CN=WIN-AD1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test

root@zentyal-ad:/usr/share/zentyal-samba# ./ad-migrate -force
WARNING: This script will transfer all FSMO roles from the current owners to
         the local server.
         After all roles has been successfully transferred, you can shutdown
         the other domain controllers.
Do you want to continue [Y/n]? Y

Checking server mode...

Checking if server is provisioned...

Synchronizing sysvol share...

Transferring FSMO roles...
Transferring Schema Master role from owner: CN=NTDS Settings,CN=WIN-AD1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
Current owner seems to be offline. Seize the role [Y/n]? Y
Transferring Domain Naming Master role from owner: CN=NTDS Settings,CN=WIN-AD1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
Current owner seems to be offline. Seize the role [Y/n]? Y
Transferring PDC Emulation Master role from owner: CN=NTDS Settings,CN=WIN-AD1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
Current owner seems to be offline. Seize the role [Y/n]? Y
Transferring RID Allocation Master role from owner: CN=NTDS Settings,CN=WIN-AD1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
Current owner seems to be offline. Seize the role [Y/n]? Y
Transferring Infrastructure Master role from owner: CN=NTDS Settings,CN=WIN-AD1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
Current owner seems to be offline. Seize the role [Y/n]? Y
Migrated successfully!
root@zentyal-ad:/usr/share/zentyal-samba#
root@zentyal-ad:/usr/share/zentyal-samba# samba-tool fsmo show
params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf"
ldb_wrap open of secrets.ldb
InfrastructureMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
RidAllocationMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
PdcEmulationMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
DomainNamingMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
SchemaMasterRole owner: CN=NTDS Settings,CN=ZENTYAL-AD,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tw2,DC=test
root@zentyal-ad:/usr/share/zentyal-samba#
 

----------------------------------------------------

以下用 RSAT 管理 AD 的 ..........

要確定有開 GC

刪除已壞的 AD Server 會刪除不掉 ....要用 LADP 工具去刪除 ....

\

用 LDAP 管理 ....我用 Softerra LDAP Administrator 試用版 ...

 轉移DNS 兩大角色 DomainDnsZonesMasterRole & ForestDnsZonesMasterRole 

CN=Infrastructure,DC=DomainDnsZones,DC=XXX,DC=XXX 的 fSMORoleOwner 改 DC 資訊

CN=Infrastructure,DC=ForestDnsZones,DC=XXX,DC=XXX 的 fSMORoleOwner  改 DC 資訊