question

ArnoldMIshaev-9439 avatar image
0 Votes"
ArnoldMIshaev-9439 asked StoyanChalakov answered

Can't demote secondary dc 2008 R2

Hi,

we are trying to demote secondary dc 2008 R2 and we encounter when an error message
does any one know what this about?

cause we tried to check all events and didn't find any related events


203123-image.png


windows-serverwindows-active-directory
image.png (13.9 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

StoyanChalakov avatar image
0 Votes"
StoyanChalakov answered StoyanChalakov edited

Hi,

that is not a big issue to worry about. If you have other, healthy domain controllers, you can just delete the domain controller from Active Directory and than do the so called "Metadata Cleanup" in order to remove all residual objects in Active Directory, associated with this DC. The whole procedure is documented in one Microsoft article here:

Step-By-Step: Manually Removing A Domain Controller Server
https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-manually-removing-a-domain-controller-server/ba-p/280564

this will help you get rid of the non-functioning DC.



(If the reply was helpful please don't forget to upvote or accept as answer, thank you)
Regards,
Stoyan





5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ArnoldMIshaev-9439 avatar image
0 Votes"
ArnoldMIshaev-9439 answered

Hi @StoyanChalakov

thank you for your respond,

I'm familiar with this procedure but we would like to do that in a right way, so we would like to fix the issue fist and then remove it in traditional way :)

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

StoyanChalakov avatar image
0 Votes"
StoyanChalakov answered

Hi @ArnoldMIshaev-9439,

I would not go this way unless there is a very strong argument for that. But...let's assume for the moment that you have no other options..
So here is what I would do in that case:

  • Attempt to fix the corruption by running the System Readiness Tool

This is describe here and for me that isi the first step if you want to try and solve the issue:

Resolution for Windows 7 and Windows Server 2008 R2
https://docs.microsoft.com/en-us/troubleshoot/windows-server/deployment/fix-windows-update-errors#resolution-for-windows-7-and-windows-server-2008-r2

dcpromo fails with An error with no description has occurred on Server 2008R2
https://robbiecrash.me/the-2008r2-domain-controller-that-wouldnt-demote/

  • Run "sfc /scannow"

Ref:
Use the System File Checker tool to repair missing or corrupted system files
https://support.microsoft.com/en-us/topic/use-the-system-file-checker-tool-to-repair-missing-or-corrupted-system-files-79aa86cb-ca52-166a-92a3-966e85d4094e

Major problem on our 2008 server, PLEASE HELP!!!
https://social.technet.microsoft.com/Forums/windowsserver/en-US/a2a7f631-6ebb-4d30-a22c-4b5aa86996a4/major-problem-on-our-2008-server-please-help?forum=winservergen

  • In case you have a CA on that server

Windows 2008: DCPromo Failed
https://msexchangeguru.com/2016/01/23/w2008-dcpromo-failed/

Please let me know exactly which steps solved the issue.


(If the reply was helpful please don't forget to upvote or accept as answer, thank you)
Regards,
Stoyan


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.