3.16 FSMOChange

Use this Knowledge Script to monitor changes to Flexible Single Master Operations (FSMO) roles in an Active Directory forest. This script raises an event if the domain controller for any role is changed.

HINT:Carefully monitor any FSMO role-holder movements to help correlate performance issues with improper role-holder placement.

3.16.1 Resource Objects

Active Directory domain

3.16.2 Default Schedule

The default interval for this script is Every 30 minutes.

3.16.3 Setting Parameter Values

Set the following parameters as needed:

Parameter	How to Set It
General Settings
Raise event if job fails
Event severity when job fails	Set the severity level, from 1 to 40, to indicate the importance of an event in which the FSMOChange job fails. The default is 35.
Monitor changes to FSMO roles
Enable job delegation?	Select Yes to enable the delegation of the job to another server where appropriate. If enabled, runs the job on the selected computer that holds the server role that you selected for the Delegate domain-wide monitoring to the... parameter. The default is unselected. For more information, see Section 3.1, AD Knowledge Script Job Delegation.
Delegate domain-wide monitoring to the	Select the server role to which the job should be delegated: Primary Domain Controller (PDC), Infrastructure Master, or RID Master. The default is PDC.
Raise event when DC assumes this role?	If you enabled job delegation, set to Yes to raise events if the DC assumes the server role you selected for the Delegate domain-wide monitoring to the... parameter. The event indicates that the monitored computer has assumed the selected role. The default is Yes.
Event severity when DC assumes this role	Set the event severity level, from 1 to 40, to indicate the importance of an event in which the DC assumes the role you selected for the Delegate domain-wide monitoring to the... parameter. The default is 30.
Raise event when DC relinquishes this role?	If you enabled job delegation, set to Yes to raise events if the DC gives up the server role you selected for the Delegate domain-wide monitoring to the... parameter. The event indicates that the monitored computer has relinquished the selected role. The default is Yes.
Event severity when DC relinquishes this role	Set the event severity level, from 1 to 40, to indicate the importance of an event in which the DC relinquishes the role you selected for the Delegate domain-wide monitoring to the... parameter. The default is 30.
Event Notification
Raise event if change to FSMO roles detected?	Select Yes to raise an event if changes to FSMO roles are detected. The default is Yes.
Event severity when change detected	Set the severity level, from 1 to 40, to indicate the importance of an event in which changes to FSMO roles are detected. The default severity level is 20.
Data Collection
Collect data for changes to FSMO roles?	Select Yes to collect data for charts and reports. If enabled, data collection returns: 100 -- no change to the FSMO roles detected, or 0 -- change to FSMO role detected. The default is unselected.