ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Error Demoting Domain Controller

    IT Discussion
    domain controller dcpromo error
    5
    32
    3.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      momurda
      last edited by

      I am guessing you want to demote DC2? That bit is unclear.

      Here:
      https://technet.microsoft.com/en-us/library/cc816893(v=ws.10).aspx

      W 2 Replies Last reply Reply Quote 0
      • W
        wirestyle22 @momurda
        last edited by

        @momurda Yes I'm demoting DC2 on each subdomain.

        1 Reply Last reply Reply Quote 0
        • M
          momurda
          last edited by

          Is the user you using to do this an Enterprise Admin?

          W 1 Reply Last reply Reply Quote 0
          • W
            wirestyle22 @momurda
            last edited by wirestyle22

            @momurda said in Error Demoting Domain Controller:

            I am guessing you want to demote DC2? That bit is unclear.

            Here:
            https://technet.microsoft.com/en-us/library/cc816893(v=ws.10).aspx

            I followed this and the old domain server that is referenced in event viewer is not listed. Everything is listed as netdom query fsmo listed.

            1 Reply Last reply Reply Quote 0
            • W
              wirestyle22 @momurda
              last edited by wirestyle22

              @momurda said in Error Demoting Domain Controller:

              Is the user you using to do this an Enterprise Admin?

              Yup

              1 Reply Last reply Reply Quote 0
              • M
                momurda
                last edited by

                Ah well then it looks like adsiedit for you then.

                W 1 Reply Last reply Reply Quote 1
                • W
                  wirestyle22 @momurda
                  last edited by

                  @momurda First time. Good learning experience for me 😄

                  D 1 Reply Last reply Reply Quote 0
                  • D
                    dafyre @wirestyle22
                    last edited by

                    @wirestyle22 said in Error Demoting Domain Controller:

                    @momurda First time. Good learning experience for me 😄

                    Don't break AD!

                    1 Reply Last reply Reply Quote 1
                    • M
                      momurda
                      last edited by

                      Yes be careful. First and easiest place to look is under the Domain Controllers section in adsi edit
                      You can also use
                      dsquery to find the location and use adsiedit to view and delete the erroneous entry.

                      W 1 Reply Last reply Reply Quote 0
                      • W
                        wirestyle22 @momurda
                        last edited by wirestyle22

                        @momurda This domain controller I'm looking for no longer exists though. It's just in event viewer.

                        The domain controllers listed in adsi edit are correct.

                        M 1 Reply Last reply Reply Quote 0
                        • M
                          momurda
                          last edited by

                          You might also get interesting results using
                          netdom query fsmo /domain:forest
                          netdom query fsmo /domain:child1
                          netdom query fsmo /domain:child2
                          from different DCs

                          1 Reply Last reply Reply Quote 0
                          • M
                            momurda @wirestyle22
                            last edited by

                            @wirestyle22
                            It might not exist 'for real' anymore but your AD thinks it does, somewhere.
                            You have to find the reference to it within the depths of AD and get rid of it.

                            1 Reply Last reply Reply Quote 2
                            • D
                              Dashrender @wirestyle22
                              last edited by

                              @wirestyle22 said in Error Demoting Domain Controller:

                              @Dashrender found this: http://khellman.blogspot.com/2014/02/ad-ds-operation-failed-dcpromo-error.html

                              Using this link, Wire and I did find that his Domain did have a left over Forest based entry in ADSI edit for the DC that no longer exists. Now trying to find the best way to resolve the problem.

                              It's likely the DC was removed without running through DCPromo. It's likely that ADSI edit Metadata cleanup will be needed.

                              1 Reply Last reply Reply Quote 2
                              • W
                                wirestyle22
                                last edited by wirestyle22

                                Update: Within ASDI Edit we connected to:
                                DC=ForestDNSZone,DC=subdomain,DC=rootdomain,DC=com

                                CN=Infrastructure (Text File) lists fSMORoleOwner in the Attribute Editor. The value showed a lot of garbled code instead of clean names, etc. A part of it was referencing the Domain Controller that hasn't been in production for a long time.

                                G 1 Reply Last reply Reply Quote 0
                                • W
                                  wirestyle22
                                  last edited by wirestyle22

                                  I logged into a domain controller on the root domain using enterprise admin credentials and was able to edit fSMORoleOwner in the Attribute Editor. I then attempted to demote the Domain Controller again and got past the initial error, but it then gave me an access denied error. I had already gone into sites and services to disable the deleted protection so I spent a long time trying to figure out why this was occurring. It simply had not replicated to the DC yet.

                                  Domain Controller successfully demoted.

                                  Big shoutouts to @Dashrender for going completely out of his way to help me resolve this issue. Can't thank you enough man.

                                  1 Reply Last reply Reply Quote 2
                                  • G
                                    Grey @wirestyle22
                                    last edited by

                                    @wirestyle22 said in Error Demoting Domain Controller:

                                    ForestDNSZone

                                    I'm trying to do this now and my ADSI edit doesn't show the ForestDNSZone. Assuming my TLD/Domain was contoso.com, I should be plugging in this, right? No worky... Not sure why.
                                    http://i.imgur.com/hvqjF5V.png

                                    W 1 Reply Last reply Reply Quote 0
                                    • W
                                      wirestyle22 @Grey
                                      last edited by

                                      @Grey said in Error Demoting Domain Controller:

                                      @wirestyle22 said in Error Demoting Domain Controller:

                                      ForestDNSZone

                                      I'm trying to do this now and my ADSI edit doesn't show the ForestDNSZone. Assuming my TLD/Domain was contoso.com, I should be plugging in this, right? No worky... Not sure why.
                                      http://i.imgur.com/hvqjF5V.png

                                      Are you working on a single domain or one root domain with multiple subdomains?

                                      G 2 Replies Last reply Reply Quote 1
                                      • G
                                        Grey @wirestyle22
                                        last edited by Grey

                                        @wirestyle22 said in Error Demoting Domain Controller:

                                        @Grey said in Error Demoting Domain Controller:

                                        @wirestyle22 said in Error Demoting Domain Controller:

                                        ForestDNSZone

                                        I'm trying to do this now and my ADSI edit doesn't show the ForestDNSZone. Assuming my TLD/Domain was contoso.com, I should be plugging in this, right? No worky... Not sure why.
                                        http://i.imgur.com/hvqjF5V.png

                                        Are you working on a single domain or one root domain with multiple subdomains?

                                        Single root. No subdomains.

                                        W 1 Reply Last reply Reply Quote 0
                                        • W
                                          wirestyle22 @Grey
                                          last edited by wirestyle22

                                          @Grey said in Error Demoting Domain Controller:

                                          @wirestyle22 said in Error Demoting Domain Controller:

                                          @Grey said in Error Demoting Domain Controller:

                                          @wirestyle22 said in Error Demoting Domain Controller:

                                          ForestDNSZone

                                          I'm trying to do this now and my ADSI edit doesn't show the ForestDNSZone. Assuming my TLD/Domain was contoso.com, I should be plugging in this, right? No worky... Not sure why.
                                          http://i.imgur.com/hvqjF5V.png

                                          Are you working on a single domain or one root domain with multiple subdomains?

                                          Single root. No subdomains.

                                          Your screenshot looks right to me. What does it say when you click OK

                                          G 1 Reply Last reply Reply Quote 0
                                          • G
                                            Grey @wirestyle22
                                            last edited by

                                            @wirestyle22 said in Error Demoting Domain Controller:

                                            @Grey said in Error Demoting Domain Controller:

                                            @wirestyle22 said in Error Demoting Domain Controller:

                                            @Grey said in Error Demoting Domain Controller:

                                            @wirestyle22 said in Error Demoting Domain Controller:

                                            ForestDNSZone

                                            I'm trying to do this now and my ADSI edit doesn't show the ForestDNSZone. Assuming my TLD/Domain was contoso.com, I should be plugging in this, right? No worky... Not sure why.
                                            http://i.imgur.com/hvqjF5V.png

                                            Are you working on a single domain or one root domain with multiple subdomains?

                                            Single root. No subdomains.

                                            Your screenshot looks right to me. What does it say when you click OK

                                            http://i.imgur.com/nB2MKxB.png

                                            W 1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 1 / 2
                                            • First post
                                              Last post