DCPromo Fails With Error: Failed To Examine The Active Directory Forest...

[DaveP]

The full error message is:

Failed to examine the Active Directory forest. The error was: The operation cannot continue because LDAP connect/bind operation failed: error: 1326 (Logon failure: unknown user name or bad password.

One of our domain controllers failed on Thursday. I couldn't DCPromo it to demote it as a domain controller or promote it. I decided to rebuild it. That didn't work. I rebuilt it with a new name. I am still getting the same error on the newly rebuilt server.

I have Googled the error with little success. Has anyone solved this problem?

We have a parent-child domain based network. The server that is giving problems is in the parent domain.

Server OS: Windows Server 2008 R2 Enterprise.

Many thanks.

[januttall]

QQ:
is the server atached to the domain as a client like a workstation before you try to dcpromo it ?

[DaveP]

QQ:
is the server atached to the domain as a client like a workstation before you try to dcpromo it ?

Yes it is. I would have thought that DCPromo would not work at all if it [the server] were not on the domain.

Thanks.

[piyushagrawal]

Hi,

Try to implement the solution given at:
RE: [ActiveDir] Weird thing with DCPROMO (SOLVED! - FEEDBACK FOR THOSE I

Hope it helps you.
Do update us again.

[Michael]

The server that failed in the parent domain, was it the FSMO role holder?

[DaveP]

Hi. We solved it. Can't go into too much detail here but the answer was unexpected [don't ask]

Thanks for the replies.