forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Microsoft Networking Services > Active Directory is happy to award RicklesP the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read

dcpromo demoting a DC

dcpromo demoting a DC

this thread has 2 replies and has been viewed 8007 times

Closed Thread
Thread Tools Search this Thread Display Modes
Old 28th June 2009, 23:15
ranjb ranjb is offline
It's not a coincidence
 Join Date: Feb 2009
  6 month star 12 month star
 Posts: 84
 Reputation: ranjb is on a distinguished road (10)
Default dcpromo demoting a DC

Hi Folks

we have 3 domain controllers all running windows 2003 (DC with FMSO roles has SP1 and the other 2 have SP2). One of the SP2 DC's is about to suffer an imminent hard drive failure and I wanted to decommission it before it dies. We have also had intermittent issues with some workstations on the domain not picking up policies and correctly logging people on. I suspect that these PC's are trying to authenticate to this dodgy DC and the communication between the two isn't happening.

The problem is I tryed to DCpromo this server yesterday and couldn't remove it as a DC. when I ran dcpromo it seemed like it was going to decommision itself until I got the following error:

The operation failed because: Active Directory could not configure the computer account SERVER$ on the remote domain controller "Access is denied."
Specify an account with Enterprise Adminstrator privileges to the forest,

I have checked thisI keep getting the same error message over and over. Its odd because I have done various promotion and decommison of DC's and never had this trouble in the past. In fact a year ago I had to decommision this exact server and repromote this exact server after some maintenance and never had a problem.

My worry is I have got a feeling that either active directory may be in a slight mess or its related to group policy objects. I have seen a few issues appearing on some of our workstations which relate to not picking up gpo objects.

I have read that i can do a dcpromo/force removal and this is likely to work, my worry is this could cause issues as I have to use a util called ntsdutil to clear out active direcory, this sounds scary and I am not comfortable with doing this method in case I make the problem worse.

Is there something I could run which could check active directory and group policy for all the DC's to help me identify the problem. I have run dcdiag on all 3 domain controllers and the problem server did bring up more issues than the other 2, and it was pointing to the File replication service and replication issues. Its like it cannot communicate with the other DC's. I have manually tried to do replication through sites and services and this works without any errors.

So I am confused.

Please help!
Old 29th June 2009, 13:15
L4ndy L4ndy is offline
 Join Date: May 2006
  6 month star 12 month star
 Location: Liverpool, UK
 Posts: 2,634
 Reputation: L4ndy is a glorious beacon of lightL4ndy is a glorious beacon of lightL4ndy is a glorious beacon of lightL4ndy is a glorious beacon of lightL4ndy is a glorious beacon of lightL4ndy is a glorious beacon of light (541)
Default Re: dcpromo demoting a DC


Check with DCdiag and Netdiag first to shed more light into the what's causing the demotion to fail (Assuming you are using an Enterprise Admin account)
If you don't get anywhere,
Transfer the FSMO roles to a "healthy" DC in the same site. Wait for a replication, try to demote again using an account that's entreprise admin member.
If it fails again, do a /forceremoval and a metadata cleanup (With ndsutil)afterwards.
Caesar's cipher - 3


Old 30th June 2009, 06:27
bunce bunce is offline
 Join Date: May 2008
  6 month star 12 month star
 Location: Adelaide, Australia
 Posts: 32
 Reputation: bunce is on a distinguished road (12)
Default Re: dcpromo demoting a DC

Also - try and make an AD backup (NT Backup is fine) while you can, just in case you run into any issues.
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Problems running dcpromo when demoting a DC heydee Active Directory 2 28th January 2009 14:45
Demoting a DC gothicreader Windows Server 2000 / 2003 / 2003 R2 3 26th January 2009 19:00
Demoting SBS2000 daiwhyte SBS 2000 / 2003 / 2008 / 2011 5 27th June 2007 03:05
help with demoting a DC razmar Active Directory 2 24th June 2005 21:29
Demoting an adminstrator larckservices Windows Server 2000 / 2003 / 2003 R2 3 14th January 2004 19:23

All times are GMT +3. The time now is 05:50.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2015, Jelsoft Enterprises Ltd.

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri