asked on

2008 DCpromo fails

Looks like the dcpromo on a 2008 fails in a mixed environment. I found the same problem by a different user:

https://www.experts-exchange.com/questions/26234271/DCPromo-Demoting-2008-R2-Errors-Out.html?sfQueryTermInfo=1+10+30+determin+float+master+oper+ownership+role+singl+unabl

And he eventually had to force the removal and do the cleanup.

Is this the only answer?

I checked the ALL the FSMO roles are held by another domain .. .domain1 and I am removing domain2

ASKER CERTIFIED SOLUTION

Vinchenzo-the-Second

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

akashguptaad

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Starquest321

ASKER

I have domain1, domain2, and domain3. Domain1 holds ALL 5 FSMO roles. I am trying to remove domain2 which is in the same domain . . .

SOLUTION

Bawer

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

ChiefIT

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Starquest321

ASKER

DC1: OS2003 - HOLD ALL 5 roles
DC2: OS2008r2
DC3: OS2003

If I do a force remove what are the implication of that?

Bawer

first make sure that you remove the server details of require server using metadata cleanup on the main server once completed then you can go ahead using force removal which has no implications, Yes untill you are sure that formal DCPROMO cannot work!

Starquest321

ASKER

"server details of require server " - sorry that did not make sense. Can you explain?

Starquest321

ASKER

I ran a DCDIAG on domain2 the server I am try demote and got this error:

dcdiag /q
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=ForestDnsZones,DC=domain,DC=us
Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
Replicating Directory Changes In Filtered Set
access rights for the naming context:
DC=DomainDnsZones,DC=domain,DC=us
......................... DOMAIN2 failed test NCSecDesc

What is that?

Bawer

server details i mean here is when you go through metadata cleanup you will see the DC details so just remove the required details from the Domain information

Starquest321

ASKER

But which details to remove?

SOLUTION

Bawer

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial