Shut Up, Laura

Perhaps it is because your using a STRING instead of the what the method request which is an ENUM of ActiveDirectoryRole

Try this

$role = [system.directoryservices.activedirectory.activedirectoryrole]::PdcRole
$dc.TransferRoleOwnership($role)

I cannot try this because I only have one DC.

btw... that error is coming from the server. It shouldnt have anything to do with Powershell.

If it weren't you asking I would say it was a user right issue :P

After further Review... It doesn't appear 2008 is supported for the .NET class. I would recommend submitting a bug/feature request into the .NET team.

Richard Siddaway has encountered the same problem:
http://www.techtalkz.com/microsoft-windows-powershell/147975-transferring-fsmo-roles.html

http://richardsiddaway.spaces.live.com/blog/cns!43CFA46A74CF3E96!831.entry

Yep, looks like I'm back to LDAP operational attributes. I'm trying on the PowerShell thing, I really am. But when the .NET methods fall down and I'm back to making an LDAP call that I can do more simply with admod, it doesn't help my confidence levels. :-)

All that code is doing is setting the operatonal attribute. Take a trace

err 80072035
# as an HRESULT: Severity: SUCCESS (0), Facility: 0x4c5, Code 0xcd63
# as an HRESULT: Severity: FAILURE (1), Facility: 0x7, Code 0x2035
# for hex 0x2035 / decimal 8245 :
ERROR_DS_UNWILLING_TO_PERFORM winerror.h
# The server is unwilling to process the request.
# 1 matches found for "80072035"


Are you sure the "DC" object points to the right DC (e.g. the target not the source)?