How To Quickly Check FSMO Roles - Active Directory Pro

Active Directory contains five roles called Flexible Single Master Operation Roles (FSMO), these roles are required for the domain controllers to function correctly. During the first domain controller installation, the FSMO roles are installed automatically. In most cases, they can be left alone, but there are times when they need to be moved such as a failed DC.

It is a good idea to be familiar with where the roles are installed in your AD environment, you never know when a disaster will hit. In this post, I will walk through two simple methods on how to list fsmo roles. The first method uses the Netdom query command and the second uses Windows PowerShell.

There are two forest wide roles and three domain wide roles

Forest Wide Roles:

• Schema Master
• Domain naming master

Domain Wide Roles:

• PDC
• RID pool manager
• Infrastructure master

Now let’s take a look at how to query the FSMO roles.

Method 1: Netdom query fsmo command line tool

Netdom is a command line tool used to manage Active Directory domains and trusts. The Netdom tool is built into Windows Server 2003 and up.

Step 1. On any domain controller open the command prompt. On Windows server click the start button and type cmd, windows will search and return the command prompt. Click on “Command Prompt”.

Note: You can also run the netdom command using PowerShell.

Step 2. From the command prompt type “netdom query fsmo” and press “enter”.

The above command should return the five roles and which DC they are on.

That’s it for the Netdom query method, very simple and straightforward.

Method 2: Powershell Get FSMO Roles

Using Powershell will require two lines of code, one to return the forest roles and another to return the domain roles.

Step 1. Open windows PowerShell. On Windows server click start and type Powershell. Click Windows Powershell from the search results

Step 2. Get forest FSMO Roles with the below command.

Get-ADForest | select DomainNamingMaster, SchemaMaster | format-list

The above command returns the forest FSMO roles which includes the Schema Master and the Domain naming master.

Step 3. Get domain FSMO roles. with the below command.

Get-ADDomain | select PDCEmulator,RIDMaster,InfrastructureMaster | format-list

The above command will return the domain FSMO roles PDC, RID pool master and Infrastructure Master).

That’s it for method two.

I recommend becoming familiar with which DCs in your environment hold the FSMO roles. It’s good to understand what these roles are and the DCs that hold them in case a disaster does occur or you have a specific reason to move them.

Related: Transfer FSMO Roles to another domain controller