Re: can't demote DC

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 11/05/04 

Date: Fri, 5 Nov 2004 10:20:42 -0500

Was it the 'delegation' problem?

Cary

<anonymous@discussions.microsoft.com> wrote in message
news:351501c4c344$b5335850$a401280a@phx.gbl...
> never mind, I figured it out, thx
> >-----Original Message-----
> >I have 3 dc's, and want to demote one of them. Let's say
> >ser01, ser 02, and ser03. I want to keep 1 and 2, get rid
> >of 3. All FSMO's are on 1 and 2. When I run dcpromo on 3,
> >it fails with the following message; the operation failed
> >because;Active Directory could not configure the computer
> >account ser03$ on the remote domain controller
> >ser01.domain.com. "access is denied". I am using an
> >enterprise admin account to run dcpromo. What permissions
> >does the 2 and 3 dc need to be able to accept
> >authentication from ser03? I think it may be something in
> >the local policy, but have not found what it is.
> >
> >I know I can force this out with ntdsutil, but would
> >rather fix this problem and do it cleanly.
> >
> >Thanks in advance for any help.
> >.
> >

Relevant Pages

  • Re: Permissions
    ... the machine is in the same forest, ... > I am going to dcpromo W2003 std edition DC from it's domain and dcpromo it ... > It acts as a file server as well for it's domain and has NTFS permissions ... > What happens to permissions when DCPROMO'd and joinjed to another domain? ...
    (microsoft.public.security)
  • Re: Reset Active Directory Permission
    ... DCPROMO defines a whole bunch of ... test environment and duplicate the permissions this way. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Changing Active Directory user information via ASP.NET
    ... Thx! ... One word: permissions. ... you almost HAVE to bind to the root of your AD ... specify the actual domain controller to bind to in order to get ...
    (microsoft.public.dotnet.general)
  • Re: Copy Security Settings
    ... Use Sandra Daigle's utility to dump and then load the permissions. ... REC wrote: ... thx. ...
    (microsoft.public.access.security)
  • Re: ACL Export
    ... > what utility can I use to numerate the number of files/folders along with ... > the permissions. ... > thx. ...
    (microsoft.public.win2000.cmdprompt.admin)