Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

Can't demote Windows Server 2008 DC

$
0
0

I have two Windows Server 2008 (non-R2) domain controllers, both installed as virtual machines on a VMWare ESXi 5.0 host.  A few weeks ago I decided I wanted to rename the domain and took a VM snapshot of both DCs.  I ran into problems with the domain rename almost right off the bat, and so I abandoned the effort and reverted both DCs back to the snapshots.

Shortly thereafter I started noticing some replication problems (adding new computers to the domain, then couldn't login to them) and found that I was getting Event ID 2103 "The Active Directory Domain Services database has been restored using an unsupported restoration procedure" in the Directory Service log.  After doing some quick research, I found KB875495 which stated I had incurred a USN rollback and, since I didn't have any other backup of the AD database (I had since deleted the snapshots), the only course of recovery was to demote the domain controller that was getting the 2103 errors, clean up the metadata, and repromote the DC.

I've tried to demote the faulty domain controller no less than 25 times, with and without the /forceremoval switch, all with no success.  Each time I try, it gets through the first 2 or 3 steps and after I enter the new password to assign to the local administrator account, it throws an error stating "Windows has encountered a critical problem and will restart automatically in one minute."  The AD DS Installation Wizard remains in the background and if I click Next on it, another error occurs stating"The wizard is unable to determine the status of the Active Directory Domain Services on this computer."  Then of course it reboots.

I've analyzed the dcpromoui log file and noticed something that doesn't seem right near the end of the log:

     using domain = xyz.local, serverName = local
     Enter FindAuthoritativeServer local
       Enter FullyQualifyDnsName local
       Enter MyDnsQuery local.
         Calling DnsQuery_W
         lpstrName : local.
         wType     : 6
         fOptions  : 8
         status = 0000232B
         RCODE_NAME_ERROR
       Enter Dns::GetParentDomainName local.
         .
       Enter MyDnsQuery .
         Calling DnsQuery_W
         lpstrName : .
         wType     : 6
         fOptions  : 8
         status = 00000000
         ERROR_SUCCESS
       Enter FindSoaRecord
         SOA record found
       autoritative server found
       Enter GetIpAddress a.root-servers.net
         Calling gethostbyname
         198.41.0.4
       result = 00000000
       authZone            = .
       authServer          = a.root-servers.net
       authServerIpAddress = 198.41.0.4
     discovered parent zone = .
   Enter State::SetParentZoneName .

I don't understand why it's trying to go to the root "dot" zone.  I don't have the root zone on my DNS servers.  I disabled recursion, hoping that might tell it not to try to go to the root zone, but that didn't help.  I'll gladly post the entire dcpromoui log if anyone feels like taking a look at it. 

Thanks in advance.




Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>