Solved

Demote 2003 Domain Controller error:  Active directory could not configure the computer account on the remote domain controller. "Cannot complete this function."

Posted on 2015-02-20
5
293 Views
Last Modified: 2015-02-25
We are in the process of demoting one of our Domain Controllers (Windows 2003).  We have built a Windows 2008 R2 server to replace the Win2003 DC.  No FSMO roles on the Win2003 - DHCP/DNS/GC/File server roles only.  We have setup DHCP/DNS/GC - Promoted Win2008 R2 server at this site.  Replication seems fine.
When running dcpromo on the Win2003 server; process went through connected to new DC, following services were stopped: NetLogon, ISMServ and KDC, removing AD objects then following error popped up:

The operation failed because:    
         Active directory could not configure the computer account on the remote domain controller.
              "Cannot complete this function."

We are unable to proceed with demoting this domain controller.

Thank you,
0
Comment
Question by:trinity2007
  • 2
  • 2
5 Comments
 
LVL 34

Accepted Solution

by:
Seth Simmons earned 500 total points
ID: 40621574
might be easier to forcibly remove it (dcpromo /forceremoval) then cleanup metadata

Clean Up Server Metadata
https://technet.microsoft.com/en-us/library/cc816907%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396
0
 
LVL 1

Expert Comment

by:easyworks
ID: 40621682
If it is no longer hosting any FSMO  make sure the primary DNS on the 2003 server is pointed to the new domain controller and try running through it again.
0
 

Author Comment

by:trinity2007
ID: 40621753
I will check that.
0
 

Author Comment

by:trinity2007
ID: 40621923
Changed the primary DNS on the 2003 server to point to new DC.  Same message...going to reboot the server and try again.
0
 
LVL 1

Expert Comment

by:easyworks
ID: 40621967
If that does not work then i'm not really sure :( . That was i believe the same message i had when i had this issues.
0

Featured Post

Will my email signature work in Office 365?

You've built an email signature using raw HTML code in Office 365, but you can't review how it looks with Transport Rules. So you have to test it over and over again before it can be used. Isn't this a bit of a waste of your time? Wouldn't a WYSIWYG editor make it a lot easier?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now