3.1.1.3.3.1 becomeDomainMaster

  • Article

Performing this operation causes the DC to request a transfer of the Domain Naming FSMO to itself, per the FSMO role transfer procedure documented in [MS-DRSR] section 4.1.10.4.3 (PerformExtendedOpRequestMsg, ulExtendedOp = EXOP_FSMO_REQ_ROLE). The requester MUST have the "Change-Domain-Master" control access right on the Partitions container in the config NC for this to succeed. This operation cannot be performed on an RODC; an RODC will return error unwillingToPerform / ERROR_INVALID_PARAMETER. The LDAP operation returns success after the transfer of the Domain Naming FSMO has completed successfully.

The type of modification can be add or replace, and the values specified in the LDAP modify operation do not matter. The following shows an LDIF sample that performs this operation.

 dn:
 changetype: modify
 add: becomeDomainMaster
 becomeDomainMaster: 1
 -