Hi, i have a Forest with 1 root Domain and several child Domains.
I administer 2 of the child Domains and i can't demote any DC on this Domains.
When i try to demote them i got the error:
Active Directory Domain Services Installation Wizard
The operation failed because:
Active Directory Domain Services could not transfer the remaining data in directory partition DC=ForestDNSZones,DC=ROOTDOMAIN,DC=COM to Active Directory Domain Controller\\Server3.ChildDoMAIN.ROOTDOMAIN.COM.
“The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles.
From my research i found out that there is a problem with the infrastructure master attribute on this DC as seen on:
http://blog.mpecsinc.ca/2011/03/ad-ds-operation-failed-directory.html
So i logon to the Server that holds the infrastructure role open ADSIEdit connect to
Default Naming Context and go to the attribute value of the domain
Check the fsMORoleOwner and copy the value (which is correct) CN=NTDS Settings,CN=Server2,CN=Servers,CN=London,CN=Sites,CN=Configuration,DC=ROOTDOMAIN,DC=com
Connect to the DC=DomainDNSZones,DC=ChildDomain,DC=ROOTDOMAIN,DC=COM of the DC i want to Demote
And edit the Infrastructure value which has the wrong settings but when i try to save it it gives me an error
ADSIEdit
Operation failed. Error code: 0x20ae
The role owner attribute could not be read.
000020AE: SvcErr: DSID-03152965, problem 5003 (WILL_NOT_PERFORM), data 0
If i try to connect to the DC=ForestDNSZones,DC=ROOTDOMAIN,DC=COM the Infrastructure fsMORoleOwner is empty and if i try to edit it with the correct value i also get the same error
I can see other people with the same error, they say in order to get rid of this error is to do it from the server that holds the infrastructure role , but that is what i am doing right now, so i don't know how to proceed.
http://www.more2know.nl/tag/fsmoroleowner/
Please help.
Many Thanks