Urgent AD demotion not working

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I am trying to demote on of my server to rename it and
promote it into another AD Forest, Every time i try to
demote the server I get the Dcpromo could not add domain
account "servername$", access is denied. I have checked
all rights in AD and I am logged in as administrator of
the AD. I can create accounts and PC with no issue, where
could I be getting denied??

What could be causing this issue, I need to get my server
demoted quick.

Thanks in advance
 
If you have a later service pack you can use the switch:

dcpromo /forceremoval

( I think I spelled that right but you can certainly find the details at
Microsoft's web site.)

SP4 definitely supports this switch and maybe earlier ones.
 
Most Appreciated, it work perfect.
Thanks Again


-----Original Message-----
If you have a later service pack you can use the switch:

dcpromo /forceremoval

( I think I spelled that right but you can certainly find the details at
Microsoft's web site.)

SP4 definitely supports this switch and maybe earlier ones.

--
Herb Martin



.
Click to expand...
 
The specific right required to update the UserAccountControl
attribute is the "Enable computer and users accounts to be trusted
for delegation" user right, granted to the Administrators group in
default domain controllers policy.

Verify that the current domain controllers in the domain have applied
security policy and the "Enable computer and users accounts to be
trusted for delegation" user right is granted to the Administrators
Group and the ENTERPRISE DOMAIN CONTROLLERS group in the domain
controllers policy (click Computer Configuration, click Windows
Settings, click Security Settings, click Local Policies, and then
click User Rights Assignment).


Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.
 
Back
Top