+ Post New Thread
Results 1 to 12 of 12
Windows Server 2000/2003 Thread, DCPROMO fails in Technical; So I'm trying to remove AD from an old 2003 server. All the FSMO roles have been moved to another ...
  1. #1
    Jobos's Avatar
    Join Date
    Apr 2007
    Posts
    1,176
    Thank Post
    188
    Thanked 57 Times in 48 Posts
    Rep Power
    26

    DCPROMO fails

    So I'm trying to remove AD from an old 2003 server. All the FSMO roles have been moved to another server but when I run DCPromo it gives the error failed to configure the service netlogon as requested.

    Any advice please?

  2. #2

    featured_spectre's Avatar
    Join Date
    Nov 2008
    Posts
    12,496
    Thank Post
    1,684
    Thanked 2,051 Times in 1,491 Posts
    Blog Entries
    2
    Rep Power
    462
    Did you demote the old server first?

  3. #3

    SYSMAN_MK's Avatar
    Join Date
    Sep 2005
    Posts
    4,012
    Thank Post
    490
    Thanked 1,345 Times in 731 Posts
    Rep Power
    429
    I would guess that the error message is from the server he is trying to demote?

  4. #4
    Jobos's Avatar
    Join Date
    Apr 2007
    Posts
    1,176
    Thank Post
    188
    Thanked 57 Times in 48 Posts
    Rep Power
    26
    Quote Originally Posted by SYSMAN_MK View Post
    I would guess that the error message is from the server he is trying to demote?
    That's correct.

  5. #5

    SYSMAN_MK's Avatar
    Join Date
    Sep 2005
    Posts
    4,012
    Thank Post
    490
    Thanked 1,345 Times in 731 Posts
    Rep Power
    429
    Did the server you are trying demote hold the DNS role? If so is it pointing to the new DNS server(s)

  6. #6
    Jobos's Avatar
    Join Date
    Apr 2007
    Posts
    1,176
    Thank Post
    188
    Thanked 57 Times in 48 Posts
    Rep Power
    26
    Quote Originally Posted by SYSMAN_MK View Post
    Did the server you are trying demote hold the DNS role? If so is it pointing to the new DNS server(s)
    Yes and it's still got DNS installed and the network settings are still pointing to itself. DNS is installed on the other servers.

  7. #7

    SYSMAN_MK's Avatar
    Join Date
    Sep 2005
    Posts
    4,012
    Thank Post
    490
    Thanked 1,345 Times in 731 Posts
    Rep Power
    429
    Seeing as you have other DNS servers you could try removing the DNS role and then point it to the other DNS Server(s) and rerun dcpromo.

  8. Thanks to SYSMAN_MK from:

    Jobos (5th August 2011)

  9. #8

    Join Date
    Aug 2011
    Location
    Oxford
    Posts
    10
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Hi,

    Funny that I had this problem this week.

    Can you try rebooting then check your DNS settings and make sure these are correct and point to valid DNS servers I found the secondary DNS was pointing to an invalid server. I went with a single DNS entry to a known good DNS server and tested with NSLOOKUP.

    If this doesn't work try stopping the netlogon service manually and check the Event Log.



    Thanks,


    Dave

    CENTREL Solutions

  10. #9
    Jobos's Avatar
    Join Date
    Apr 2007
    Posts
    1,176
    Thank Post
    188
    Thanked 57 Times in 48 Posts
    Rep Power
    26
    Quote Originally Posted by SYSMAN_MK View Post
    Seeing as you have other DNS servers you could try removing the DNS role and then point it to the other DNS Server(s) and rerun dcpromo.
    I don't know why but that did the trick, DCPromo removed AD without any problems.

  11. #10


    Join Date
    Mar 2008
    Location
    Surrey
    Posts
    2,307
    Thank Post
    128
    Thanked 351 Times in 290 Posts
    Blog Entries
    4
    Rep Power
    141
    Quote Originally Posted by Jobos View Post
    I don't know why but that did the trick, DCPromo removed AD without any problems.
    It's to do with the advertising of domain services in DNS I believe - since the controller's demoting itself, it doesn't trust itself to provide it's own domain services. Just pointing DNS to another DC should have fixed it.

    I could be wrong though.

  12. #11

    SYSMAN_MK's Avatar
    Join Date
    Sep 2005
    Posts
    4,012
    Thank Post
    490
    Thanked 1,345 Times in 731 Posts
    Rep Power
    429
    Quote Originally Posted by Jobos View Post
    I don't know why but that did the trick, DCPromo removed AD without any problems.
    Great stuff, glad it's all sorted. The reason why it worked is because DNS is a cruel Mistress!

  13. #12

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,342
    Thank Post
    242
    Thanked 1,602 Times in 1,278 Posts
    Rep Power
    346
    This could of been related to DNS Zone Transfers. When you run dcpromo to demote a server, the process involves migrating DNS settings and other critical domain information. Although removing the DNS role works, it's generally not recommended. You should be able to demote a DC with AD and DNS without any issues.

    I would check that all Forward and Reverse DNS Lookup Zones have replicated. If not, then just re-create them manually.



SHARE:
+ Post New Thread

Similar Threads

  1. MSI deployment fails after DCPROMO
    By cookie_monster in forum Windows
    Replies: 7
    Last Post: 25th July 2008, 09:56 AM
  2. Java Script fails to work on one user profile!
    By pmassingham in forum Windows
    Replies: 0
    Last Post: 29th June 2006, 08:32 AM
  3. Connection Fails Without Admin Rights
    By MrDylan in forum ICT KS3 SATS Tests
    Replies: 8
    Last Post: 12th May 2006, 01:23 PM
  4. Amazon.co.uk Fails to load
    By Simcfc73 in forum Windows
    Replies: 0
    Last Post: 10th March 2006, 04:02 PM
  5. Replies: 1
    Last Post: 16th February 2006, 10:57 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •