Simon Leung
asked on
Demote Window 2012 server
Encouter the following error when demoting a Window 2012 DC server. This server is not the last DC in my network and the server doesn't hold fsmo role. However, it is a last DC in other site under the same domain. Run repadmin/replsummary can show the other 2 DCs in other site. Any idea ?
Uninstall-ADDSDomainContro ller : The operation failed because:
Active Directory Domain Services could not find another Active Directory Domain Controller to transfer the remaining
data in directory partition DC=DomainDnsZones,DC=xxxxy ,DC=com.
"The specified domain either does not exist or could not be contacted."
At line:1 char:1
+ Uninstall-ADDSDomainContro ller
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~
+ CategoryInfo : NotSpecified: (:) [Uninstall-ADDSDomainContr oller], DCPromoExecutionException
+ FullyQualifiedErrorId : DCPromo.General.54,Microso ft.Directo ryServices .Deploymen t.PowerShe ll.Command s.Uninstal lA
Uninstall-ADDSDomainContro
Active Directory Domain Services could not find another Active Directory Domain Controller to transfer the remaining
data in directory partition DC=DomainDnsZones,DC=xxxxy
"The specified domain either does not exist or could not be contacted."
At line:1 char:1
+ Uninstall-ADDSDomainContro
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Uninstall-ADDSDomainContr
+ FullyQualifiedErrorId : DCPromo.General.54,Microso
ASKER
Using the ADSI Edit
Looking for Default naming context
DC=xxxx, DC=com: CN:Infrastrucutre : the fsmoRoleOwner is pointed to a valld FSMO role in the other site.
However, under DC=DomainDNSZones,DC=xxxx, DC=COM and DC=ForestDNSZones,DC=xxxx, DC=COM, the FSMO role is still pointing to the DC server that I want to demote.
netdom query show that all the role is stored in the DC server in the other site. Try to manually change the DomainDNSZones and ForestDNZone shows up an error...
Looking for Default naming context
DC=xxxx, DC=com: CN:Infrastrucutre : the fsmoRoleOwner is pointed to a valld FSMO role in the other site.
However, under DC=DomainDNSZones,DC=xxxx,
netdom query show that all the role is stored in the DC server in the other site. Try to manually change the DomainDNSZones and ForestDNZone shows up an error...
Check the local DNS, see whether the zone this DC controls is the local reverse DNS zone.
I.e. This site has 172.31.12.0/24 ip segment and thus DC hosts the zone and the zone. Is limited to this site.
Are you retiring the setver or just want to demote to a me,Ger server?
DHCP, DNS services will remain.
Change the DNS zone of reverse to accessible by member servers and not limited.
I.e. This site has 172.31.12.0/24 ip segment and thus DC hosts the zone and the zone. Is limited to this site.
Are you retiring the setver or just want to demote to a me,Ger server?
DHCP, DNS services will remain.
Change the DNS zone of reverse to accessible by member servers and not limited.
ASKER
Check the DNS record., both segements (current network segment and segment in the other site) can be seen. The DC that i want to demote is on the DataCentre. As it will be closed, I want to demote it and fully shutdown all services.
Seem like my problem is related to this article. However, I make change on setting in the server in other side. Those settings has been reflected on the server that I want to demote. However, I still receive the same error..
https://dailysysadmin.com/KB/Article/1039/active-directory-active-directory-could-not-transfer-the-remaining-data-the-operation-failed-could-not-transfer-the-remaining-zones-event-id-2091/
Seem like my problem is related to this article. However, I make change on setting in the server in other side. Those settings has been reflected on the server that I want to demote. However, I still receive the same error..
https://dailysysadmin.com/KB/Article/1039/active-directory-active-directory-could-not-transfer-the-remaining-data-the-operation-failed-could-not-transfer-the-remaining-zones-event-id-2091/
The article includes testing as well as steps to address the issue.
Does the DC you want to demote reflect itself as an infrastructure owner. They include ADSL modifications before you run the script on a current DC that gas all the fsmo roles?
Does the DC you want to demote reflect itself as an infrastructure owner. They include ADSL modifications before you run the script on a current DC that gas all the fsmo roles?
ASKER
The DC that I want to demote is dcbackupserver. Run "netdom query fso" and confirm all roles are held in another server hqbackupserver.
Attached the log on dcbackupserver as well.
Thx.
checklog.txt
Attached the log on dcbackupserver as well.
Thx.
checklog.txt
ypur situation seems to be covered in the article you found dealing with fixfsmo ms script that needs to be run on your existing DC that reflects all the fsmo roles..... To get the dnszone/forest zone transferred in.
I'm not sure that article applies to your situation. The description of the error in your case is "The specified domain either does not exist or could not be contacted," while the article deals with "The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles." Those aren't the same thing.
Run dcdiag on the other two DCs and see if either of them fails one or more tests.
Run dcdiag on the other two DCs and see if either of them fails one or more tests.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I.e. Your structure is mydomain.com
Then each site has site1.domain,com for which DC us responsible.
Look at dcdiag ./v
Check properties to make sure this DC is not a sole ......
Look at active directory sites and services/trusts....