DC Demotion



We have a WSS Server that was originally a domain controller. We removed
the DC role and attached the machine to the new DCs and domain.

Currently, the local security policies are disabled but the group policies
are not being picked up from the new DCs.

Our network folks are thinking we need to demote the server using dcpromo,
but I wanted to see if there was anything we should be considering. We
simply want to get this server to pick up the group policies.

Also, if a local policy is more restrictive then the group one, will it
override the group? It looks like the local policies have some of the old
setting still set but as I said we can't change them.

TIA
Mark


.



Relevant Pages

  • Re: Demoting a DC in W2003
    ... forrest / single domain with three DCs. ... It's only role is being a DC and our primary internal DNS server. ... transfered the FSMO roles from DC1 to DC2 using the MS KB article 324801. ... The local domain controller has attempted to replicate the following object from the following source domain controller. ...
    (microsoft.public.win2000.active_directory)
  • Re: unauthorized Same as parent entry
    ... domain inplace when he said "We're running MS Server 2003 flavor of DNS. ... >> queries that only specify the domain. ... >> The query result will be a domain controller host record. ... > quite regularly by group policies. ...
    (microsoft.public.win2000.dns)
  • Re: Many problems after upgrade 2000 -> 2003 server
    ... domain controller" is the higher one. ... Digitally signed communications to the same value for the server and client ... If both DCs are Windows Server 2003, please enable the settings in "default ...
    (microsoft.public.windows.server.migration)
  • Re: Server 2000 domain upgrade to Server 2003
    ... functional level on the 2003 server. ... Replicate all changes among all exisiting DCs ... Upgrade the AD schema using the 32bit disc 2 ... the active directory it should be a good domain controller. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Issue with DC
    ... context TD.com from domain controller TD1 to domain controller TD2: ... Do you have any FW between these DCs? ... How to configure Windows Server 2003 SP1 firewall for a Domain Controller ... and make sure that you can force replication ...
    (microsoft.public.windows.server.active_directory)

Loading