Seize Schema Master Fails with Access is Denied

On a Windows Server 2012 R2 domain controller in our sandbox, logged in as the Domain Administrator, I attempted to seize all of the fsmo roles using the following PowerShell command:


Move-ADDirectoryServerOperationMasterRole -Identity “Target_DC_Name” –OperationMasterRole 0,1,2,3,4 -force

I successfully seized the PDC Emulator, RID Master, and Infrastructure Master roles, but the seizure of Schema Master failed with an Access is Denied message.

The Administrator account was a member of Schema Admins and Enterprise Admins, so it had the correct permissions assigned. After much online searching, I found the suggestion to make Schema Admins the primary group for the account. The default was Domain Users. After making Schema Admins the primary group, the PowerShell command worked to seize the Schema Master role.

Seize Schema Master Fails with Access is Denied

7 thoughts on “Seize Schema Master Fails with Access is Denied

  1. Mireiawen says:

    This helped! For anyone else struggling with this, I also had to log off and log back in after changing the primary group, but after that it worked.

    Like

  2. Glenn Gahnstedt says:

    I was logged in as Domain Admin, with Schema Master group membership… One would really think that would be enough!… Thanks for sharing this… it was giving me a huge headache. Cheers! (Server 2016)

    Like

  3. Joe says:

    After messing with this problem for an hour this did it for me as well, set primary group as Schema Admin log off and back on, run command…No errors. Thank you!

    Like

  4. I have noticed you don’t monetize meschofield.com, don’t waste your traffic,
    you can earn extra cash every month with new monetization method.
    This is the best adsense alternative for any type of website (they approve all websites),
    for more details simply search in gooogle: murgrabia’s tools

    Like

Leave a comment