需求:
主域控制器出现灾难故障,辅助域控制器正常
在辅助域控制器使用ntdsutil工具清理主域控制器并夺取PDC角色
首先清理孤立的域控制器
ntdsutil
ntdsutil: metadata cleanup
metadata cleanup: select operation target
select operation target: connections
server connections: connect to domain 3b.net #登陆到本地域
server connections:quit
select operation target: list sites
select operation target: List domains in site
select operation target: select domain 0
select operation target: select server 0
select operation target: quit
metadata cleanup:Remove selected server #删除一个域控制器
metadata cleanup:quit
ntdsutil: quit
辅助域控制需要夺取五种FMSO成为主域控制器
ntdsutil
ntdsutil: metadata cleanup
metadata cleanup: select operation target
select operation target: connections
server connections: connect to domain 3b.net #登陆到本地域
server connections:quit
select operation target: list sites
select operation target: List domains in site
select operation target: select domain 0
select operation target: select server 0
select operation target: quit
##夺取角色
fsmo maintenance:Seize domain naming master
fsmo maintenance:Seize infrastructure master
fsmo maintenance:Seize PDC
fsmo maintenance:Seize RID master
fsmo maintenance:Seize schema master
fsmo maintenance:quit
ntdsutil: quit