Unable to demote DC using dcpromo

Setup:
Two DC one is primary, other is secondary. Both set as global catalog.

Situation:
1.) I need to demote the primary DC so that I can format and reload due to some other issues, however when i run dcpromo I get a dialog box titled "New Credentials" that says "The operation failed because: The attempt to configure the machine account CORP-SRV-01$ on server corp-srv-02.local.com failed. "Access is denied." followed by "Specify an account with Enterprise Administrator privileges to the forest, "local.com". At the bottom of this whole box are text fields where I can type in the username, password, and domain.
2.) I have tried the Administator username and password.
3.) The Administrator profile is a member of the Enterprise Administrator group.
4.) If possible I would like not to force a demotion.

Thanks for the help.
kevinlee83Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Debsyl99Commented:
Hi
"Access Denied" Error Message During Active Directory Promotion of Replica Domain Controller
http://support.microsoft.com/?kbid=250874

I'd also check your dns server setup - ensure that dns is active directory integrated and the all records are present.

Setting Up the Domain Name System for Active Directory
http://support.microsoft.com/?kbid=237675
Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS
http://support.microsoft.com/?kbid=291382

Deb :))
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
GinaRCommented:
Have you transfered the roles yet, before demoting the domain controller?  That way, you are not demoting a primary DC, but a replica, and if something goes wrong, your primary is still up.

I had almost a similar problem.  I was setting a test enviornment and trying to demote a replica DC.  Got the same error, saying "Access Denied" and wanted credentials.  Nothing would work.  But then I noticed that I could not access Group Policy either, and my problems were a little deeper than that.  Microsoft's website suggested reinstalling the File and Printer sharing service, but that didn't help me much.  Since it was a test enviornment, I didn't care much.

What does the DCpromo.log say on the server you are trying to demote? I think it's in C:\Windows\System32 folder.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.