This appeared on some DCs but not all.
They all seem to have detected the change though....?? Is that normal?
Log Name: Directory Service
Source: Microsoft-Windows-ActiveDirectory_DomainService
Date: 18/12/2020 12:15:36
Event ID: 1458
Task Category: Internal Configuration
Level: Information
Keywords: Classic
User: domain\01DC0$
Computer: 00DC2.domain.local
Description:
The operations master role represented by the following object has been transferred to the following directory service at the request of a user.
Object:
CN=Infrastructure,DC=domain,DC=local
Directory service:
CN=NTDS Settings,CN=T2MDC0,CN=Servers,CN=Reading,CN=Sites,CN=Configuration,DC=domain,DC=local
Previous operations master role owner:
CN=NTDS Settings,CN=00DC2,CN=Servers,CN=Reading,CN=Sites,CN=Configuration,DC=domain,DC=local
Event Xml:
1458
0
4
7
0
0x8080000000000000
44625
Directory Service
00DC2.domain.local
CN=Infrastructure,DC=domain,DC=local
CN=NTDS Settings,CN=T2MDC0,CN=Servers,CN=Reading,CN=Sites,CN=Configuration,DC=domain,DC=local
CN=NTDS Settings,CN=00DC2,CN=Servers,CN=Reading,CN=Sites,CN=Configuration,DC=domain,DC=local
