I have an account that is part of the Domain admins group, the Schema admins group, and the server operators group but I am unable to promote or demote a domain controller. I am the one who installed and configured all of these servers. Our security guy implemented a bunch of GPO's that I am now in charge of but I can't find anything that would stop me from promoting a server. Any Ideas? The error I get says that my account doesn't have access to change the account for z000tsm1$ to a domain controller. I can get the exact words if someone needs them.