Demotion of a domain controller

HIE.

I installed the ADDS on a production server, and it became the only domain controller in the network. Then, I realized some of the services that I was using for my accounting program not able to connect. I then decided to demote the domain controller. After entry and confirmation of the Restore Mode password I hope to return to my original administrator account, but it turns out a new was created. now the services necessary for the opening of session are no longer available and I would return to my administrator account of origin with all its settings and user profile. wanted to know if this is possible and how I can do it.

I did this first on 2012 R2 server and 2003 server.

your help would be greatly apprecitiated.

Hello

Post your question in the TechNet Server Forums, as your question kindly is beyond the scope of these Forums.

http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

See you soon.

Tags: Windows

Similar Questions

  • How to remove a domain controller that was removed from the Internet works but not demoted

    How to remove a domain controller that has been remove from the Internet works but not demoted

    got two domain controllers and been deleted but not retrograde

    can help pls

    Hello

    Your Windows is better suited for the directory on TechNet Services. You can follow the link to ask your question: http://social.technet.microsoft.com/Forums/en-us/winserverDS/threads

    I hope this helps.

  • Problem with to demote a domain controller

    Hi all

    I tried today demote a domain controller, but my domain environment is still need of this domain controller to work.
    I have windows Server 2003 Small Business DC as DC1 & lately I added windows Server 2008 R2 DC as DC2 in the new box as an additional area. Now, I need to downgrade the windows server 2003 SB (DC1) in an old box.
    I transferred FSMO (all 5 roles) and remove DC1 from the announcement. In addition, remove it AD users & computers and Services of & Sites AD and DNS... I used the steps in this link: http://www.petri.co.il/delete_failed_dcs_from_ad.htm
    When Dc1 is not connected to the network, you receive this error (see this picture of this link http://i41.tinypic.com/30upoxj.png) every time I opened all the consoles AD (AD users & computers, etc...).
    Also, when I tried to change the domain controller, it seems that he could not located the domain or domain controllers. Please, see this photo from this link: http://i43.tinypic.com/2n6afx1.png
    I can solve it reconnect DC1 to the network, but I don't want to keep it longer, and I don't know what Miss me? Also, I tried to use dcpromo to remove the domain controller DC1, but I got an error message that tells me that this is not the last domain controller in the forest and cannot proceed with the removal of the DC.
    Can you help me as soon as POSSIBLE, I'm right here.
    Waiting for your answer... Thank you!

    Hi Haitham2011,

    The question you have posted is related to Windows Server 2008 and would be better suited to the TechNet community. Please visit the link below to find a community that will provide the support you want.

    http://TechNet.Microsoft.com/en-us/WindowsServer/default

    I hope this helps.

  • Domain Services Active Directory could not create the ntds object due to dns settings look for failure on the specific domain controller

    Forest consist of 1 DC server 2003 with all fsmo and 2000 1 domain controller roles.

    Completed all questions of adprep and when I tried to promote server 2008 standard edition to a domain controller, had the error message stating that Active Directory could not create the NTDS settings for the domain active directory CN = NTDS controller

    Settings, cn is 2k8dc1, cn = servers, cn = Default First Site Name, c is Sites, cn = Configuration, dc is Marie-France, dc = com on the ad distance dc server2.amanua.com.

    To ensure that the provided network credentials have sufficient permissions

    "The DSA operation unable to act because of the failure of the dns lookup"

    The idea was to demote the 2000 machine when I completed the installation of 2008.

    Hello

    You can display the query in the link provided to improve assistance:
    http://social.technet.Microsoft.com/forums/en/categories/

  • migrate domain controller

    I have a server windows 2008 x 86 business as a primary domain controller.  What I want to do is move not only to new hardware but for migrating to server 2008 x 64 so I can install exchange 2007.  I was wondering about what is the best practice to do such.  FYI the source server running a VIA C7D and the destination is a computer that is running vmware esxi 4.1.

    With x 86 to x 64 cast, here is how I see it down:

    Install the operating system Windows Server 2008 x 64 on the new material (fresh and clean) and update/patch entirely.  Dcpromo in the existing domain.  Hover over the FSMO roles to it.  Move all the other functions of the old existing on server.  demote and remove the old server.

    Fact.

  • Windows Server 2003 P2V domain controller

    I tried to understand the best way to do it.  We have a backup domain controller that is programmed to be either P2V would or recreated as a virtual machine.  Whatever it is, it's going to happen in our cluster HA.  I wonder if we can make just a P2V using the converter bootable without problems or would it not be better to organize a new virtual machine, and then go through the process of promotion and demotion.  Has anyone ran into any ING questions P2V one domain controller?  I can't really find any advice on this with the exception of a Microsoft document.  I looked on the forum and the exchange of Experts, and the general consensus seems to be, just do not do.  It is best to start from scratch.  I said why?  What happens when you P2V one domain controller?  If this isn't a secondary domain controller, so what about the PDC?  Are there unwritten rules on that?  A white paper that can be nice to look at?  Any help that anyone can give would be great.  For us, the easy way is to P2V, but if this isn't a good idea, then I guess we have the opposite effect.

    Found this blog relevant today!

    http://blogs.technet.com/b/askds/archive/2010/06/10/how-to-VIRTUALIZE-Active-Directory-domain-controllers-part-1.aspx

    ... Do online physical to virtual (P2V) conversions. Every P2V conversions for computers in domain controller role should be offline...

  • Questions, communicate with a Windows domain controller

    I thought at first my user had a problem with Keychain and had finally called Apple Tech Support.  While on the line with Apple, we proved that it was not a question of Keychain, but rather a problem of communication with a windows domain controller. The key elements are:

    * Multiple users and Macs are members of an Active Directory multi-domain forest

    * iMac is a 27-inch, mid-2011w / 8 GB RAM

    * OS X 10.11.2 (updated 10.11.3)

    * Question appears isolated to this iMac (currently). All other iMac, Macbook Pro and Mac Pro is currently very well, several VIRTUAL LANs, and a MacBook connected to the connection of network iMacs can communicate properly with the domain.

    * iMac seems not to contact no matter what domain controller when connecting, but connects to the resources of the network and domain controllers, after login. Permissions and access to the resources appear normal after login.

    * User (s) cannot change passwords for mobile accounts or login with new mobile accounts, but accounts/passwords cached work very well.

    * iMac uses Symantec EndPoint Protection for Mac (anti-virus) – REQUIRED BY THE POLICY.  I can't change.  I have come off for the test, but must replace as soon as the test is completed. This policy is set at a level about five grades of remuneration above me.

    * It isn't really everything off the coast of the wall software installs on the computer.  The full Adobe Creative Cloud subscription is responsible, but so it is on just about every other mac I support.

    The steps that have taken place:

    (1) about a month ago, the user went to change his password, but wouldn't go to change password at the login window.  We were able to change their password on the network and could use the new password to connect to the network Active Directory controlled resources. We can connect to resources network successfully with the new password, after we connect locally with the old password.

    (2) we get the red ball (the network resources are not available) to the login window. We are basically connecting with identification and passwords cached information.

    (3) if we try to change their password through the system preferences / users and groups / / password Chang, we get the message that no domain controller is available.

    (4) initially thought that it was a matter of trousseau, and we ended up calling Apple support, since Keychain first aid is no longer available in 10.11. Apple-Advisor while that remote, showed where it was not a question of Keychain because we could not change the password on the domain, because the iMac didn't communicate with a domain controller.

    (5) while on the phone with Apple, we reset SMC and NVRAM without success.

    (6) If you are going to untie the iMac in the domain, a message that the system cannot communicate with a domain controller.

    (7) today, thinking that maybe there was a hardware problem with the ethernet connection, tried to use the private WiFi network. Still would not communicate with a controller domain, but, as if using the wired, could connect to network resources. This happens independently attempted account.

    (8) used a MacBook on its network without any problem, it is not the connection port or switch

    (9) moved his iMac to another connection on one VLAN different. Same question.

    I'm open to suggestions. I have two days to work on this subject, around the planning of production of the user, while I'm off site for a week.

    10) thinking that maybe it was something that happened with 10.11.2, he improved to 10.11.3 today. No change.

    I don't want to try to clean and recharge its iMac, in the hope that this clears up the issue.

    ANY SUGGESTIONS?

    A few additional tests.

    (1) Symantec deleted using Symantec CleanWipe, without modification. Has been reinstalled after additional tests and a reinstallation of the operating system.

    (2) being ran reports, visualization and research now, but nothing is really coming out as noticeable. Only problem seems to be a helper of Adobe

    (3) use a bootable USB key and had no problem with the thumb drive version, this isn't somehow a hardware problem.

    4) entered the recovery partition and the re-installed El Capitan, in the hope that perhaps, is a pilot or something in the protocol stacks have been corrupt, a reinstall would correct. Reinstall has not corrected the problem.

    I'm really strongly leaning towards here is something in a plist or somewhere configuration file that is corrupted, but I don't know where this would be right now.  Will continue research and testing. Last resort will be a wipe up to bare metal and a clean install. I will not migrate the profile of the user, but only its working files.

  • 2012 R2 in Windows domain controller goes to three options when you restart in hyper-v, but cannot boot from any option

    After that creating a differencing disk (Windows 2012 R2 MSDN) that points to a virtual hard drive in windows that was Sysprep, I went through all the measures to promote a domain controller, but then I get 3 options, one to stop and connect to DC, two to repair, and three to stop this PC, the virtual machine does not restart to something else than these three options. I have also set up the IP address to be in the same subnet as the host gave the DNS the same thing as the vm and can ping a Web site ok, but cannot get the malicious windows package to get from windows update then nothing else before I did this PC a 2013 R2 domain controller.

    Any help would be gladly appreciated, as I did the same for 2008 a few years ago, no problem - learn everything MS 2013 if all goes well soon on this...

    Marc

    This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)

    If you give us a link to the new thread we can point to some resources it
  • Prerequisites for domain controller promotion is not for windows server 2012

    For windows server 2012 check of preconditions for the promotion of domain controller has failed. TCP ports required by Active Directory Domain Services are already in use on this computer. You must remove or reconfigure the services that currently use these ports (88, 389, 636, 3268, 3269).

    Support is located in the Windows Server Forums:
    http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer/

  • The server has not completed the compliance audit of the licenses. If the server is joined to a domain, make sure that the server can connect to a domain controller.

    Hi all

    Can I confirm with expert from Microsoft, it's windows foundation server 2012 may not be the first domain controller (which means that the first AD in the forest)? It must be attached to the root of the forest as a domain controller. If I'm promoting it to be first DC in new forest, he invites you to "the server has not completed the compliance audit of the licenses. If the server is joined to a domain, make sure that the server can connect to a domain controller. If the license compliant check cannot be completed, the server will automatically close in 9 days...

    Thank you & best regards
    Andy

    Hi Andy,.

    Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the TechNet Windows Server Forums:
    http://social.technet.Microsoft.com/forums/en/category/WindowsServer

    Hope the helps of information.

  • Windows Server Std 2012 R2 domain controller

    Hello world. We have problems in the domain controller with Windows Server R2 2012 in the VM that it helps domain users to connect to the DC remotely with admin rights. We have already allowed group policy by default on the management of the user rights that allow remote only for domain administrators. We did not refuse access, because the new user must be added to each new user creation. We do not want to use distribution of the Group deny. is it possible to access remotely to DC?

    Thanks in advance.

    This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
    *
  • Windows 2003 domain controller

    Hi Expert,

    Since a few days my business met the internet problem. All the PC and server connected to the DC not able to go online. After a few minute 15-20 minute network is automatically recovered and able to go online. I checked with ISP they confirmed no question about they site. Our main installed dns on the PDC as well. Can one confirmed no matter what happens on the domain controller may cause the network problem in devices that connected to the domain controller?

    This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
    *
  • Windows Server 2012 - create the existing Windows Server 2003 domain controller.

    Hello.

    I am currently working on adding a domain controller Windows Server 2012 and field existing Windows 2003.  My current domain controller (Server 2003) had a level of functiontional of Windows 2000 server, when I first tried to add the server DC 2012.  I changed the functional level of the domain on the Server 2003 Windows 2003 (it is the only domain controller in the tree).  When I try to add the Server Server 2012, he reports that this domain is a Windows 2000 domain.  I checked and restarted the 2003 server.  Does anyone know why the 2012 still sees the field as 2000 functional level?

    Thank you

    D. Webb

    DW

    This issue is beyond the scope of this site and must be placed on Technet or MSDN

    http://social.technet.Microsoft.com/forums/en-us/home

    http://social.msdn.Microsoft.com/forums/en-us/home

  • Additional domain controller configration

    Hi all

    My Question is that I use Windows 2008 R2 server as a domain controller, now I'm going to set up the additional RODC on Server 2003 widows. What should I do before configure ADC on Win 2003 server. I have a update my machine win-2003 Server service pack.

    Kind regards

    Sajjad Jamil M

    LHE_Pakistan

    This issue is beyond the scope of this site and must be placed on Technet or MSDN

    http://social.technet.Microsoft.com/forums/en-us/home

    http://social.msdn.Microsoft.com/forums/en-us/home

  • Secondary domain controller problem

    I have primary and secondary domain controller, my secondary domain controller is not connected to working groups, the error com like that

    Hi Ellamaran,

    I suggest that you post the application on Microsoft TechNet forum because we have experts working on these issues. You can check the link to post the same query on TechNet:

    http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

    Please do not hesitate to contact us if you have other questions related to Windows.

Maybe you are looking for