Unable to demote DC using dcpromo

Posted on 2004-11-15
Last Modified: 2012-08-14
Two DC one is primary, other is secondary. Both set as global catalog.

1.) I need to demote the primary DC so that I can format and reload due to some other issues, however when i run dcpromo I get a dialog box titled "New Credentials" that says "The operation failed because: The attempt to configure the machine account CORP-SRV-01$ on server failed. "Access is denied." followed by "Specify an account with Enterprise Administrator privileges to the forest, "". At the bottom of this whole box are text fields where I can type in the username, password, and domain.
2.) I have tried the Administator username and password.
3.) The Administrator profile is a member of the Enterprise Administrator group.
4.) If possible I would like not to force a demotion.

Thanks for the help.
Question by:kevinlee83
    LVL 20

    Accepted Solution

    "Access Denied" Error Message During Active Directory Promotion of Replica Domain Controller

    I'd also check your dns server setup - ensure that dns is active directory integrated and the all records are present.

    Setting Up the Domain Name System for Active Directory
    Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS

    Deb :))

    Expert Comment

    Have you transfered the roles yet, before demoting the domain controller?  That way, you are not demoting a primary DC, but a replica, and if something goes wrong, your primary is still up.

    I had almost a similar problem.  I was setting a test enviornment and trying to demote a replica DC.  Got the same error, saying "Access Denied" and wanted credentials.  Nothing would work.  But then I noticed that I could not access Group Policy either, and my problems were a little deeper than that.  Microsoft's website suggested reinstalling the File and Printer sharing service, but that didn't help me much.  Since it was a test enviornment, I didn't care much.

    What does the DCpromo.log say on the server you are trying to demote? I think it's in C:\Windows\System32 folder.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    Basic understanding on "OO- Object Orientation" is needed for designing a logical solution to solve a problem. Basic OOAD is a prerequisite for a coder to ensure that they follow the basic design of OO. This would help developers to understand the b…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now