Hello,
I'm having trouble demoting a Windows 2008 R2 Server from out domain. When I try to run the DCPROMO process it fails with the error of:
Active Directory Domain Services could not transfer the remaining data in directory partition DC=DomainDnsZones,DC=<domain>,DC=<domain>,DC=com to Active Directory Domain Controller <name of a DC>
I've troubleshot the issue to this one mentioned in the following article:
http://support.microsoft.com/kb/2694933
which in turn, leads to this one:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;949257
If I check the property of the CN=Infrastructure,DC=DomaiNDnsZones,DC=<domain>,DC=<domain>,DC=com in adsiedit then the fSMORoleOwner attribute does incorrectly refer to an old DC that was decommissioned a long time ago:
CN=NTDS Settings\0ADEL:95576719-0df5-4159-af0e-be380c6d0b43,CN=<name of old DC>\0ADEL:e60abc98-4ca9-4c52-ae50-b2c0cc2495c3,CN=Servers,CN=>name of site>,CN=Sites,CN=Configuration,DC=<domain>,DC=com
My issue is, if I try to either manually correct the fSMORoleOwner attribute or run the fixfsmo.vbs script I get an error.
If I try to amend the property, adsiedit reports:
Operation failed. Error code 0x20ae. The role owner attribute could not be read. 000020AE: SvcErr: DSID-03152965, problem 5003 (WILL_NOT_PERFORM), data 0
If I try to run the fixfsmo.vbs script it says:
(20, 5) (null): Name translation: Could not find the name or insufficient right to see name.
I'm also confused about where to try to run this. The DC which will not demote is in our Child Domain. The parent domain does not have this issue and I demoted a DC in the parent domain without any problems on the same day.
If anyone can help with this problem I would be most grateful.