DCPROMO Error whilst trying to demote

[Frut02]

Hi,

 

I am trying to demote one of out domain controllers, however get the follwing message.. Any ideas?

 

Thanks

 

Nick

[FN-GM]

I got this last week!

 

Uncheck the accidental deletion in Active directory of users and computers of that DC and also do it to all the object that DC deals with in Sites and services.

[Frut02]

Neither were ticked for protect object.

[FN-GM]

So the computer account wasn't?

 

In sites and services have you check on the server itself, The NTDS setting that come under that and then the replication servers under NTDS settings? All of them need to be unchecked.

[Frut02]

Yes all of thoes are unticked, just ran it again same error!

[FN-GM]

Did you run DCpromo as an administrator? IE right click run as administrator?

[Ergo]

Have you tried running DCDIAG on this server before running DCPROMO?

This should ensure the server has no issues which may be causing the problem.

[Frut02]

An Error Event occurred. EventID: 0x40000004

Time Generated: 01/11/2013 12:50:44

EvtFormatMessage failed, error 15100 Win32 Error 151

(Event String (event log = System) could not be retr

0x3afc)

An Error Event occurred. EventID: 0x40000004

Time Generated: 01/11/2013 12:50:44

EvtFormatMessage failed, error 15100 Win32 Error 151

(Event String (event log = System) could not be retrieved

0x3afc)

......................... DC-03 failed test SystemLog

That failed.! The reason i am demoting it is becasue it doesnt want to see any of the other dc's which i think is the reason it wont let me deomte.

 

I had to restore this server from a earlier backup. does anyone know what problems that might of caused?

[Ergo]

Most likely issue here is that the computer account password is out of sync with the domain. How old was the backup you restored from?

[Frut02]

8th of december,

However the account password has not changed for ages.

 

Nick

[Ergo]

Computer accounts change their "password" automatically on a regular basis (I don't mean the Administrator user account you are logging on with).

 

Does this server have any FSMO roles or other applications installed which means you need to retain the server? There is another option if not which is to simply power the machine off, delete the account from AD and do an AD meta-data clean-up for the computer account.

 

Dave

[Frut02]

Sorry just saw your post!

 

I have sorted it, i did a meta data clean up from dc-01 and then forced the dcpromo on the offending domain controller.

 

Thanks for all your help.!