Unable to demote a DC

[HMCTech]

Get an error of Active Directory Domain Services could not transfer the remaining data in teh directory partition DC=ForestDNSZones,

"The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles."

 

Not able to fond any useful information on the net for this error.

[pete]

You've checked remaining DCs hold all FSMO roles (and that each remaining DC knows who's got them?)

 

What does dcdiag /q /v and netdiag /q show?

[HMCTech]

All FSMO roles are on one DC, not the one im demoting. dcdiag shows that these roles are correct. The only error I can find is;

 

The operations master roles held by this directory server could not transfer to the following remote directory server.

 

Remote directory server:

\\SERVER.domain.net

 

This is preventing removal of this directory server.

 

User Action

Investigate why the remote directory server might be unable to accept the operations master roles, or manually transfer all the roles that are held by this directory server to the remote directory server. Then, try to remove this directory server again.

 

Additional Data

Error value:

5005 The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles.

Extended error value:

0

Internal ID:

52498735

[pete]

I'll assume you've checked but..

 

DNS ok? Server.FQDN for each DC resolves on the other DC?

You've made the second DC a global catalogue?

 

If you attempt to transfer FSMO roles manually on the server that thinks it still holds roles, does it let you? See: How to view and transfer FSMO roles in Windows Server 2003 (assuming 2003)

[HMCTech]

The DC im demoting never held any FSMO roles so I dont understand why it is failing on moving some. I have checked on all three of our DC's who holds the roles and they are correct. DNS resolves fine to all DC's.

[GangrelChilde]

Hi,

 

Have you tried the command dcpromo /forceremoval? I'm not sure if this will cause any side affects so may be worth checking before going ahead, but it worked ok for us when facing a similar problem.

 

Pete

[teejay]

You can do a forced removal using dcpromo, but make sure you have extremely good backups of your dc's before you do this. How to force demotion is here: Domain controllers do not demote gracefully when you use the Active Directory Installation Wizard to force demotion in Windows Server 2003 and in Windows 2000 Server

[HMCTech]

We have three DC's so doing a force removal of one shouldnt affect them. I will use it as a last resort

[BrotherSidious]

Saw this today and had the same issue. Just in case anyone else comes by this I resolved mine by following this Error message when you run the "Adprep /rodcprep" command in Windows Server 2008: "Adprep could not contact a replica for partition DC=DomainDnsZones,DC=Contoso,DC=com"

 

When you issue the CSCRIPT command you can change "DomainDns" for "ForestDNS" and when I copied the script it wouldnt work unless you delete or comment out the first line