Transfer the RID master role

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To transfer the RID master role

Open Active Directory Users and Computers.
In the console tree, right-click Active Directory Users and Computers, and then click Connect to Domain Controller.
In Enter the name of another domain controller, type the name of the domain controller you want to hold the RID master role.

Or, click the domain controller in the list of available domain controllers.
In the console tree, right-click Active Directory Users and Computers, point to All Tasks, and then click Operations Masters.
Click the RID tab, and then click Change.

Notes

To perform this procedure, you must be a member of the Domain Admins group or the Enterprise Admins group in Active Directory, or you must have been delegated the appropriate authority. As a security best practice, consider using Run as to perform this procedure. For more information, see Default local groups, Default groups, and Using Run as.
To open Active Directory Users and Computers, click Start, click Control Panel, double-click Administrative Tools, and then double-click Active Directory Users and Computers.
To transfer a role to another domain controller, you may first need to change the focus of Active Directory Users and Computers to the target domain controller. To do this, right-click Active Directory Users and Computers, click Connect to Domain Controller, and then click the target domain controller.

Open Command Prompt.
Type:

ntdsutil
At the ntdsutil command prompt, type:

roles
At the fsmo maintenance command prompt, type:

connection
At the server connections command prompt, type:

connect to serverDomainController
At the server connections command prompt, type:

quit
At the fsmo maintenance command prompt, type:

transfer RID master

Value	Description
DomainController	The domain controller to which you want to assign the new operations master role.

Notes

To perform this procedure, you must be a member of the Domain Admins group or the Enterprise Admins group in Active Directory, or you must have been delegated the appropriate authority. As a security best practice, consider using Run as to perform this procedure. For more information, see Default local groups, Default groups, and Using Run as.
To open a command prompt, click Start, point to All programs, point to Accessories, and then click Command prompt.
To view the complete syntax for this command, at the ntdsutil command prompt, type:

roles ENTER

? ENTER

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.