Hi,
I am about the demote Win2k3 DC from the environment. I have read many articles related to this and did followings as preparations. I only did not quite understand certificate related step which some articles mentioning it before demoting the DC. How can I make sure that I don't have certificate related issues prior demoting the DC?
Note: I have 2 more DCs with Windows 2008 R2 and FSMO have been moved long time ago. No role left on the Win2k3 other than AD.
In addition I have plenty of KDC error as follow. Some people said that I should ignore it. Should I?
Event Type: Error Event Source: KDC Event Category: None Event ID: 27 Date: 21/12/2012 Time: 9:16:43 AM User: N/A Computer: ICD21 Description: While processing a TGS request for the target server krbtgt/ICD.LOCAL, the account ICD25$@ICD.LOCAL did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 8). The requested etypes were 18. The accounts available etypes were 23 -133 -128 3 1. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Regards