Commands to check in DC

Run -- CMD --- Enter

1. To check the domain controller role and default policies

net accounts

2. To check FSMO roles and identified the roles assigned DC details

netdom query fsmo

3. To check Active directory domains and trusts

domain.msc

4. To replicate PDC and ADC

--> Active Directory Sites and Services

--> Sites

--> Default First Site Name

--> Servers

we have to check every server ntds settings- Link

How to: Make Secondary Domain Controller the
Primary, when primary fails.

Step 1: one

Open CMD on secondary domain, at prompt type Ntdsutil and press enter.
Example: C:\windows>ntdsutil
ntdsutil:

Step 2: Two

Once complete type: roles and press enter.

you will see-
fsmo maintenance:

Step 3: Three

Then type: connections and press enter.

you will see-
server connections:
Now type the name of the secondary server you are trying to make primary.
Example-
server connections: connect to domain (primary domain name)
it will say connected using local user.
Step 4: Four
Next step type q.
server connections: q
Now we are going to seize the FSMO.
type:
seize domain naming master
seize PDC
seize RID master
seize schema master

Step 5: Five
from start—> click run and enter dsa.msc
right click the domain that shows and select Operations Master.
From here promote your domain.
Done.

use the following command to check the status.

netdom query fsmo

FSMO Role Administrator must be a member of

Schema Schema Admins

Domain Naming Enterprise Admins

RID Domain Admins

PDC Emulator

Infrastructure