Re: Seize FSMO Role when first forest is gone

From: "Paul Williams [MVP]" <ptw2001@xxxxxxxxxxx>
Date: Tue, 3 Oct 2006 07:37:51 +0100

By default, EA has access to transfer naming master only. Schema Admins
have the default permissions to transfer the schema master.

You can delegate any of these tasks by granting the pertinent extended
right, i.e. Change-Schema-Master as well as WP on the appropriate
fSMORoleOwner attribute for the object in question, e.g. CN=Schema,
CN=Configuration, DC=...

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net

.

References:
- Seize FSMO Role when first forest is gone
  - From: dalep
- Re: Seize FSMO Role when first forest is gone
  - From: Paul Williams [MVP]
- Re: Seize FSMO Role when first forest is gone
  - From: dalep
- Re: Seize FSMO Role when first forest is gone
  - From: Jorge Silva

Prev by Date: Re: replication
Next by Date: Re: Adding Branch office server to the same domain at corp office
Previous by thread: Re: Seize FSMO Role when first forest is gone
Next by thread: Re: Windows Domain Structure
Index(es):
- Date
- Thread

Relevant Pages

Re: Active Directory Schema Permissions
... Select Advance from Permissions for Schema, go to owner tab, verify ... select the option to change the owner to Schema Admins. ... it says that Administrators have no permissions. ...
(microsoft.public.windows.server.security)
Re: ADPREP /forestprep And R2
... You need to add yourself to both the Enterprise Admins and Schema Admins to ... modify the schema. ... These are groups, not permissions. ...
(microsoft.public.windows.server.active_directory)