FSMOFunctions.ps1

something exciting

Some information about the exciting thing

Table of contents generated with markdown-toc


Script

<#
    .SYNOPSIS
    A set of functions to provide the ability to manage Active Directory FSMO Roles.

    .DESCRIPTION
    A set of functions to provide the ability to manage Active Directory FSMO Roles.

    Functions included;
    Get-FSMORoleOwner
    Set-FSMORolePDCEmulator
    Set-FSMORoleRIDMaster
    Set-FSMORoleInfrastructureMaster
    Set-FSMORoleSchemaMaster
    Set-FSMORoleDomainNamingMaster
    Move-FSMORolestoPDCEmulator

    Wrapper for the Move-ADDirectoryServerOperationMasterRole command.
    Operation Master Roles
    PDCEmulator or 0
    RIDMaster or 1
    InfrastructureMaster or 2
    SchemaMaster or 3
    DomainNamingMaster or 4


    .EXAMPLE
    PS C:\> Get-FSMORoleOwner

    PDCEmulator          : DOMAINCONTROLLERNAME.example.com
    DomainNamingMaster   : DOMAINCONTROLLERNAME.example.com
    InfrastructureMaster : DOMAINCONTROLLERNAME.example.com
    RIDMaster            : DOMAINCONTROLLERNAME.example.com
    SchemaMaster         : DOMAINCONTROLLERNAME.example.com

    .EXAMPLE
    PS C:\> Get-FSMORoleOwner | Select-Object RIDMaster

    RIDMaster
    ---------
    DOMAINCONTROLLERNAME.example.com

    .EXAMPLE
    PS C:\> Set-FSMORolePDCEmulator -PDCEmulator DOMAINCONTROLLERNAME

    Move Operation Master Role
    Do you want to move role 'PDCEmulator' to server 'DOMAINCONTROLLERNAME.example.com' ?
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): Y

    .EXAMPLE
    PS C:\> Set-FSMORoleRIDMaster -RIDMaster DOMAINCONTROLLERNAME

    Move Operation Master Role
    Do you want to move role 'RIDMaster' to server 'DOMAINCONTROLLERNAME.example.com' ?
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): Y

    .EXAMPLE
    PS C:\> Set-FSMORoleInfrastructureMaster -InfrastructureMaster DOMAINCONTROLLERNAME

    Move Operation Master Role
    Do you want to move role 'InfrastructureMaster' to server 'DOMAINCONTROLLERNAME.example.com' ?
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): Y

    .EXAMPLE
    PS C:\> Set-FSMORoleSchemaMaster -SchemaMaster DOMAINCONTROLLERNAME

    Move Operation Master Role
    Do you want to move role 'SchemaMaster' to server 'DOMAINCONTROLLERNAME.example.com' ?
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): Y

    .EXAMPLE
    PS C:\> Set-FSMORoleDomainNamingMaster -DomainNamingMaster DOMAINCONTROLLERNAME

    Move Operation Master Role
    Do you want to move role 'DomainNamingMaster' to server 'DOMAINCONTROLLERNAME.example.com' ?
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): Y

    .EXAMPLE
    PS C:\> Move-FSMORolestoPDCEmulator

    Move Operation Master Role
    Do you want to move role 'InfrastructureMaster' to server 'DOMAINCONTROLLERNAME.example.com' ?
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): Y

    .INPUTS
    Each SET function accepts piped input. All SET functions are strings.
    $PDCEmulator
    $RIDMaster
    $InfrastructureMaster
    $SchemaMaster
    $DomainNamingMaster

    .OUTPUTS
    Get-FSMORoleOwner

    PDCEmulator          : DOMAINCONTROLLERNAME.example.com
    DomainNamingMaster   : DOMAINCONTROLLERNAME.example.com
    InfrastructureMaster : DOMAINCONTROLLERNAME.example.com
    RIDMaster            : DOMAINCONTROLLERNAME.example.com
    SchemaMaster         : DOMAINCONTROLLERNAME.example.com


    .NOTES
    Author:     Luke Leigh
    Website:    https://blog.lukeleigh.com/
    LinkedIn:   https://www.linkedin.com/in/lukeleigh/
    GitHub:     https://github.com/BanterBoy/
    GitHubGist: https://gist.github.com/BanterBoy

    .LINK
    https://github.com/BanterBoy/scripts-blog

#>

#Requires -Module ActiveDirectory
#Requires -RunAsAdministrator

function Get-FSMORoleOwner {
    [CmdletBinding(DefaultParameterSetName = 'Default',
        HelpURI = 'https://github.com/BanterBoy/scripts-blog',
        SupportsShouldProcess = $true)]

    $ForestInfo = Get-ADForest | Select-Object DomainNamingMaster, SchemaMaster
    $DomainInfo = Get-ADDomain | Select-Object InfrastructureMaster, PDCEmulator, RIDMaster

    try {
        $Properties = @{
            PDCEmulator          = $DomainInfo.PDCEmulator
            RIDMaster            = $DomainInfo.RIDMaster
            InfrastructureMaster = $DomainInfo.InfrastructureMaster
            SchemaMaster         = $ForestInfo.SchemaMaster
            DomainNamingMaster   = $ForestInfo.DomainNamingMaster
        }
    }
    catch {
        $Properties = @{
            PDCEmulator          = $DomainInfo.PDCEmulator
            RIDMaster            = $DomainInfo.RIDMaster
            InfrastructureMaster = $DomainInfo.InfrastructureMaster
            SchemaMaster         = $ForestInfo.SchemaMaster
            DomainNamingMaster   = $ForestInfo.DomainNamingMaster
        }
    }
    finally {
        $obj = New-Object -TypeName PSObject -Property $Properties
        Write-Output $obj
    }
}

function Set-FSMORolePDCEmulator {
    [CmdletBinding(DefaultParameterSetName = 'Default',
        HelpURI = 'https://github.com/BanterBoy/scripts-blog')]
    param(
        [Parameter(Mandatory = $True,
            ValueFromPipeline = $True,
            HelpMessage = "Enter Domain Controller ServerName where you want to move the PDCEmulator FSMO Role")]
        [Alias('PDC')]
        [String]$PDCEmulator
    )
    Move-ADDirectoryServerOperationMasterRole -Identity $PDCEmulator -OperationMasterRole 0
}

function Set-FSMORoleRIDMaster {
    [CmdletBinding(DefaultParameterSetName = 'Default',
        HelpURI = 'https://github.com/BanterBoy/scripts-blog')]
    param(
        [Parameter(Mandatory = $True,
            ValueFromPipeline = $True,
            HelpMessage = "Enter Domain Controller ServerName where you want to move the RIDMaster FSMO Role")]
        [Alias('RID')]
        [String]$RIDMaster
    )
    Move-ADDirectoryServerOperationMasterRole -Identity $RIDMaster -OperationMasterRole 1
}

function Set-FSMORoleInfrastructureMaster {
    [CmdletBinding(DefaultParameterSetName = 'Default',
        HelpURI = 'https://github.com/BanterBoy/scripts-blog')]
    param(
        [Parameter(Mandatory = $True,
            ValueFromPipeline = $True,
            HelpMessage = "Enter Domain Controller ServerName where you want to move the InfrastructureMaster FSMO Role")]
        [Alias('Infra')]
        [String]$InfrastructureMaster
    )
    Move-ADDirectoryServerOperationMasterRole -Identity $InfrastructureMaster -OperationMasterRole 2
}

function Set-FSMORoleSchemaMaster {
    [CmdletBinding(DefaultParameterSetName = 'Default',
        HelpURI = 'https://github.com/BanterBoy/scripts-blog')]
    param(
        [Parameter(Mandatory = $True,
            ValueFromPipeline = $True,
            HelpMessage = "Enter Domain Controller ServerName where you want to move the SchemaMaster FSMO Role")]
        [Alias('Schema')]
        [String]$SchemaMaster
    )
    Move-ADDirectoryServerOperationMasterRole -Identity $SchemaMaster -OperationMasterRole 3
}

function Set-FSMORoleDomainNamingMaster {
    [CmdletBinding(DefaultParameterSetName = 'Default',
        HelpURI = 'https://github.com/BanterBoy/scripts-blog')]
    param(
        [Parameter(Mandatory = $True,
            ValueFromPipeline = $True,
            HelpMessage = "Enter Domain Controller ServerName where you want to move the DomainNamingMaster FSMO Role")]
        [Alias('Domain')]
        [String]$DomainNamingMaster
    )
    Move-ADDirectoryServerOperationMasterRole -Identity $DomainNamingMaster -OperationMasterRole 4
}

function Move-FSMORolestoPDCEmulator {
    [CmdletBinding(DefaultParameterSetName = 'Default',
        HelpURI = 'https://github.com/BanterBoy/scripts-blog')]
    $ForestInfo = Get-ADForest | Select-Object DomainNamingMaster, SchemaMaster
    $DomainInfo = Get-ADDomain | Select-Object InfrastructureMaster, PDCEmulator, RIDMaster
    $PrimaryDC = Get-ADDomainController -Discover -Domain $Env:USERDNSDOMAIN -Service 'PrimaryDC'
    if ( $DomainInfo.RIDMaster -notmatch $PrimaryDC ) {
        Move-ADDirectoryServerOperationMasterRole -Identity $PrimaryDC -OperationMasterRole 1
    }
    if ( $DomainInfo.InfrastructureMaster -notmatch $PrimaryDC  ) {
        Move-ADDirectoryServerOperationMasterRole -Identity $PrimaryDC -OperationMasterRole 2
    }
    if ( $ForestInfo.SchemaMaster -notmatch $PrimaryDC ) {
        Move-ADDirectoryServerOperationMasterRole -Identity $PrimaryDC -OperationMasterRole 3
    }
    if ( $ForestInfo.DomainNamingMaster -notmatch $PrimaryDC ) {
        Move-ADDirectoryServerOperationMasterRole -Identity $PrimaryDC -OperationMasterRole 4
    }
}

Back to Top


Download

Please feel free to copy parts of the script or if you would like to download the entire script, simple click the download button. You can download the complete repository in a zip file by clicking the Download link in the menu bar on the left hand side of the page.


Report Issues

You can report an issue or contribute to this site on GitHub. Simply click the button below and add any relevant notes. I will attempt to respond to all issues as soon as possible.

Issue


Back to Top