+ Post New Thread
Results 1 to 13 of 13
Windows Server 2008 R2 Thread, Server Demotion Woes .. in Technical; Afternoon Folks So, I've been having some issues with logons of late and have noticed that our secondary (and older) ...
  1. #1
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,402
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78

    Server Demotion Woes ..

    Afternoon Folks

    So, I've been having some issues with logons of late and have noticed that our secondary (and older) server seems to be having issues (it's got a couple of drives and / or it's RAID controller flashing at me like a mad'un for a start) so I've decided to demote it from being a DC as it's not needed as one really.

    So, I've gone through the various processes and what not (migrated the CA Services, ensuring the various roles are on the newer DC, rebooted the one I'm looking to demote, etc) and got the stage of running dcpromo, which I'm doing from an elevated command prompt, but I keep getting the following error:

    The operation failed because:

    The wizard could not authenticate to Active Directory Domain Controller xxx using the supplied credentials.

    "The specified server cannot perform the requested operation."
    Initially I was running dcpromo from a standard command prompt, so I opened an elevated one, and I'm logged on using the administrators account for the domain.

    HELLP!

    Thanks
    Andy

  2. #2
    jamesreedersmith's Avatar
    Join Date
    Sep 2009
    Location
    Ruskington
    Posts
    1,158
    Thank Post
    78
    Thanked 253 Times in 227 Posts
    Rep Power
    76
    Check primary DNS is configured to point at an alternate DC when demoting - not doing this can cause this problem.

  3. Thanks to jamesreedersmith from:

    soveryapt (1st May 2014)

  4. #3

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    Are the servers definitely replicating OK and is DNS in order? These are the sort of problems that can prevent dcpromo running correctly.

  5. Thanks to Michael from:

    soveryapt (1st May 2014)

  6. #4
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,402
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Quote Originally Posted by jamesreedersmith View Post
    Check primary DNS is configured to point at an alternate DC when demoting - not doing this can cause this problem.
    Yup, the DNS points to the newer G6 server's IP Address ..

  7. #5
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,402
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Quote Originally Posted by Michael View Post
    Are the servers definitely replicating OK and is DNS in order? These are the sort of problems that can prevent dcpromo running correctly.
    I think there might be a replication issue going on, hence looking to remove that as staff are coming when they've changed their password and finding that it's not actually changed .. hence looking at all this in the first place ..

  8. #6

    Join Date
    Jun 2008
    Posts
    718
    Thank Post
    118
    Thanked 64 Times in 52 Posts
    Rep Power
    31
    Seeing as you can't demote right now, perhaps it's worth running a test on your DNS.

    From command prompt run this command: dcdiag /test:dns

    Just to see if there are any errors and what have you.

  9. #7
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,402
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Ok, so just run a repadmin /showrepl and it's saying server down, so tried connecting to the server using \\servername and it's saying it can't connect .. oh dear .. some digging to be done me thinks ..

  10. #8
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,402
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Quote Originally Posted by Chuckster View Post
    Seeing as you can't demote right now, perhaps it's worth running a test on your DNS.

    From command prompt run this command: dcdiag /test:dns

    Just to see if there are any errors and what have you.
    All passed .. just running a few other dcdiag tests to see what it brings up ..

  11. #9
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,402
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Right, run a dcdiag /ReplSource test and it's failing on:

    KCCEvent
    KnowsOfRoleHolders
    Replications
    SystemLog

    Everything else is fine, so looks like something somewhere is block replications (which I think is therefore causing the other fails) .. let the digging commence .. whoop ..

  12. #10

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    If you're confident DNS isn't the issue, you'll need to initialise burflags. This'll make the other working DC authoritative and restore replication. Once this is done, you can then safely run dcpromo and properly demote it.

  13. Thanks to Michael from:

    soveryapt (7th May 2014)

  14. #11

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,746
    Thank Post
    145
    Thanked 555 Times in 499 Posts
    Rep Power
    151
    Check the DFS-R event logs. Had lots of fun recently with Jet database errors causing DFS-R replication between DCs to fail, leaving the sysvol inconsistent (how this affects the AD DB I'm not so sure). The Event Viewer actually tells you the command to run which fixes the issue. This can happen if you have a dirty shutdown on a DC. You can set a registry entry which stops it recurring though:



    Key: HKey_Local_Machine\System\CurrentControlSet\Servic es\DFSR\Parameters

    Value [DWORD]: StopReplicationOnAutoRecovery

    Data: 0

    This is relevant in pre-2012 R2 OSs too DFS Replication in Windows Server 2012 R2: Revenge of the Sync - The Storage Team at Microsoft - File Cabinet Blog - Site Home - TechNet Blogs

  15. Thanks to 3s-gtech from:

    soveryapt (7th May 2014)

  16. #12
    bart21's Avatar
    Join Date
    Aug 2009
    Location
    peterborough
    Posts
    404
    Thank Post
    77
    Thanked 54 Times in 52 Posts
    Rep Power
    20
    If server is no longer required, turn it off and run a metadata cleanup on the good dc.

    Nick

  17. Thanks to bart21 from:

    soveryapt (7th May 2014)

  18. #13
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,402
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Thanks for all your help guys. In the end I've gone through, checked for any updates and such and installed those on both servers, and following a quick reboot of them both (well as quick as servers reboot! lol) I've just managed to successfully demote the older server. Hopefully this will help fix a few other issues I've been having at the school now it's just a member server instead.

    Now to plan other updates and such (PaperCut etc). All the fun of the fair for me!

SHARE:
+ Post New Thread

Similar Threads

  1. Sibelius Licence Server Move Woes
    By rich_tech in forum Educational Software
    Replies: 3
    Last Post: 25th April 2014, 03:08 PM
  2. Ubuntu Server Booting Woes
    By HallX in forum *nix
    Replies: 26
    Last Post: 10th January 2011, 03:16 PM
  3. Client programs taking ages to load after server demotion.
    By PrimaryTech in forum Windows Server 2000/2003
    Replies: 3
    Last Post: 20th November 2010, 06:58 PM
  4. Demote Sims server DC
    By K.C.Leblanc in forum MIS Systems
    Replies: 10
    Last Post: 6th October 2009, 09:18 PM
  5. Demote Replication Server
    By Nick_Parker in forum Windows
    Replies: 19
    Last Post: 23rd March 2008, 04:32 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •