Fluid_Imagery
asked on
File Replication Service: Access Denied
I'll keep the story short...
I 'm trying to demote a domain controller on Server 2000 using dcpromo. The reason being is so I can change the computer name, and then re-create the domain controller. My client is taking the old PDC out of the mix and I need this new server to take over that server name so we wont need to re-map all the network shares. Every time I try to run dcpromo on the server to demote it I get an error... File Replication Service: Access Denied. If I go into service manager I can't change anything with the service... Stop, Pause, Disable etc, I get the same error, which of course make sense.
Any insight would be of help, I've been looking around google and microsoft knowledgebase without much help.
Thanks in advance, you guys are great.
I 'm trying to demote a domain controller on Server 2000 using dcpromo. The reason being is so I can change the computer name, and then re-create the domain controller. My client is taking the old PDC out of the mix and I need this new server to take over that server name so we wont need to re-map all the network shares. Every time I try to run dcpromo on the server to demote it I get an error... File Replication Service: Access Denied. If I go into service manager I can't change anything with the service... Stop, Pause, Disable etc, I get the same error, which of course make sense.
Any insight would be of help, I've been looking around google and microsoft knowledgebase without much help.
Thanks in advance, you guys are great.
ASKER
Administrator is logged in, Permissions are fine. Server seems to be working fine other than this problem.
what about the event logs?
ASKER
I'll check that tomorrow... but I don't know how much that is going to do for me
With the logs it should be possible to pinpoit why you get those replication errors and then it should be possible repair your system up to the point so that the dcpromo demotion will work.
What other roles did you assign to your server, some roles will prevent you demoting your server from Domain controller until you disable them. Also check whether the aadministrator is a member of Enterprise administrators and Schema administrators.
Hi
This can be an issue with Windows 2000 service pack 2 and below - so could you confirm your service pack level to rule this out?
The event logs are always a good place to start troubleshooting server issues. You could also check that the sysvol is shared on both or all dc's - that system has full control on the sysvol and sub-directories and that dc's can resolve each other correctly - although I suspect from the access denied error it's a sysvol or other permissions error
How do I troubleshoot missing SYSVOL and NETLOGON shares on Windows domain controllers?
http://www.jsiinc.com/SUBN/tip6500/rh6543.htm
You could also run and post the output from dcdiag - you'll need to use the correct version of dcdiag for the service pack levels of the dc's -
Windows 2000 SP4 Support Tools
http://www.microsoft.com/windows2000/downloads/servicepacks/SP4/supporttools.asp
Deb :))
This can be an issue with Windows 2000 service pack 2 and below - so could you confirm your service pack level to rule this out?
The event logs are always a good place to start troubleshooting server issues. You could also check that the sysvol is shared on both or all dc's - that system has full control on the sysvol and sub-directories and that dc's can resolve each other correctly - although I suspect from the access denied error it's a sysvol or other permissions error
How do I troubleshoot missing SYSVOL and NETLOGON shares on Windows domain controllers?
http://www.jsiinc.com/SUBN/tip6500/rh6543.htm
You could also run and post the output from dcdiag - you'll need to use the correct version of dcdiag for the service pack levels of the dc's -
Windows 2000 SP4 Support Tools
http://www.microsoft.com/windows2000/downloads/servicepacks/SP4/supporttools.asp
Deb :))
If you are unable to stop the file replication service...
Then it is either the file system is corrupt or another application(e.g. antivirus) is preventing
it from stopping.
change the startup type for the file replication service to disabled.
Do the same for the antivirus.
start->run
services.msc
double click on file replication service
Change the startup type to disablved.
Schedule chkdsk to run on next reboot
start->run
chkdsk c: /f /r
reboot the server
defragment the boot volume
then run DCPromo again.
Then it is either the file system is corrupt or another application(e.g. antivirus) is preventing
it from stopping.
change the startup type for the file replication service to disabled.
Do the same for the antivirus.
start->run
services.msc
double click on file replication service
Change the startup type to disablved.
Schedule chkdsk to run on next reboot
start->run
chkdsk c: /f /r
reboot the server
defragment the boot volume
then run DCPromo again.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I'm with Nyama, on the "better approach".
One thing I would add... If you're going to rename the server, ESPECIALLY if it was a DC, I would probably sysprep it after I renamed it, and before I brought it back in to the network.
Never can tell what havoc may be created by changing name without changing SID on a DC.
jb
One thing I would add... If you're going to rename the server, ESPECIALLY if it was a DC, I would probably sysprep it after I renamed it, and before I brought it back in to the network.
Never can tell what havoc may be created by changing name without changing SID on a DC.
jb
Oops, sorry Nyaema for spelling your handle wrong.
Are you logged in as a Domain Admin?
Have you checked the NTFS permissions on the .exe file that the service runs?
have you ran chkdsk /f on the server?
have you tryed any other logins?
have you reviewed the event logs?