Not a Schema Admin? Schema Role on Non-AD Controller?
Posted on 2016-09-30
On a 2000 Forest, and 2008 R2 DC, I tried to raise the functional level and it says I cannot because the schema master is not reachable. Strangely, the Schema and Naming master is on a 2012 Member server. Yes, I said that right. I went to seize the roles back to he 2008 R2 DC and it says I do not have sufficient rights as domain admin. I go to look at the group membership of the schema admins and it says I cannot view the properties.
All I can think is that some junior admin took offline an old AD controller and did not move these roles. This old server is gone - years gone. Not sure how I can proceed. It is a small network. Is my best bet to simply create a new domain? Or can you all help me?