[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 402
  • Last Modified:

Active directory on win 2000 server

Hello,
i'm not familier with win 2000 i need to move actove directory to another win 2000 server.
I used ntdsutil tools and try to seize the roles first to seize domain naming master i get error:

Attemting safe tranfer of domain naming FSMO before seizure.
ldap_modify_sW eror 0x35<53 (Unwilling To Perform).
Ldap extended error message is 0000214B: SvcErr: DSID-03210834, problem 5003 (Will_not_perform), Data 0
Win32 error retured is 0x214b(only DSAs configured to be Global Catalog servers should be allowed to hold the domain Naming Master FSMO role.)
Depending on the error code this may idicare a connection,
ldap, or role tranfer error.
rOLE SEIZURE IS FORBIDDEN IN THIS CASE.


HELP
0
Aida2
Asked:
Aida2
  • 2
2 Solutions
 
Jay_Jay70Commented:
Hi Aida2,

wait a second! have you promoted your second server to a DC using dcpromo?

why are you seizng the role - you should be transferring them!
http://www.petri.co.il/transferring_fsmo_roles.htm

Cheers!
0
 
Aida2Author Commented:
Thanks for resp.
I try transferring vi gui (from the link you gave me) i get error
The domain controller .... was not validated because: The RPC server is unavailable.
When i login to new server and i can change to another domaincontroller.!
0
 
Aida2Author Commented:
I run netdiag on the new server i get error:
...passes
...passed
 Domain membership test . . . . . . : Failed
    [WARNING] Ths system volume has not been completely replicated to the local
machine. This machine is not working properly as a DC.
...passed
...passed
0
 
adamdrayerCommented:
NEVER seize roles unless your original Domain Controllers crash!  You must first join the server to the Domain and then install Active Directory using DCPROMO.  Then gracefully change the FSMO role holders.  

Retiring Domain Controllers and transferring FSMO roles is something that I do not recommend network admins try if they have never done it before.  It can seriously and permanently damage your network.  I would seek out a professional to help you
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now