Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-3235: How to change the master domain controller for multiple zones?

Authentication Service ,  

12 April,16 at 11:13 AM

Applies to: All versions of Centrify DirectControl for UNIX/Linux




In Centrify DirectControl console (aka DirectManage Access Manager), how does an administrator change the master domain controller for multiple Zones?




If one is using the same master domain controller for multiple Zones, it may be necessary to change the domain controller for all Zones at once. 

For example, if several Zones use the server as their master domain controller, and the server has a hardware failure or another problem that requires it to be taken down, all of the Zones using that domain controller need to connect to a new master domain controller.


Note: Make sure to notify all Centrify DirectManage administrators before changing the master domain controller for multiple Zones and if possible, make this change while they are all logged out. Depending how long it takes for replication to complete across the domain controllers in the Active Directory forest, it is recommended to schedule this change for a time when no administrators need access to Zone information.


  1. Open the DirectManage Access Manager Console.
  2. In the console tree, select Zones to display the list of Zones in the details pane.
  3. Use SHIFT-then highlight all the zones-CLICK or CTRL-CLICK to select Zones to set to a new master domain controller.
  4. Right-click, then select "Change Master Domain Controller".
  5. Type the fully-qualified domain name for the new domain controller, then click OK.
  6. Click Yes to confirm the change.


The above information is also available in the Administrator's Guide for UNIX, which can be downloaded from: