Demoting a Windows 2003 Domain controller

[Duncan McC]

Sponsored Links

Today we are going to demote two of our Domain Controllers. None of them hold any roles neither are GC or holds any roles. Before I do this I would like to know few things. While starting the process I ran dcpromo logged in as Domain Administrator the why is it asking me to specify a new administrator's password? If I’m logged in as Domain Admin already it should not ask the new admin password, right? Also does it want the domain one or the local one?

Please help.

[Winckle]

It is asking the correct thing dude. Actually the DC don’t use to have Local Account for the server except DSRM account. Hence whenever you will try demoting a DC you will need a local admin password.

So go on and set a new password.

[Duncan McC]

Thanks for such a great explanation. Demoting when find, but now I'm getting DNS errors, 4011, 4015 and 4004. Any advice would be great.

[JUSTICE]

I know the cause of those error codes. Actually you need to specify password to logon locally when the server is demoted. You might be knowing that you can not logon locally on DC, you need to use domain accounts. So simply specify a new password for the local administrator and keep it safe. Hope it helps.