Hi
i'm demoting my dc to memeber server.
It's store all user data with ntfs permissions.
Just wanna to be sure that demoting my dc, the memebr server will keep all ntfs permissions
is it true?
true, if it is the last domain controller you effectively will lose your domain, and all the users and groups in it. Which means all your access control lists on the files and folders will reference users & group that no longer exist.
if it's not your last DC for this domain, you're fine.
as you have 3DCs, the two remaining will still maintain a copy of the directory service and all its objects, including 'local groups'
when a server becomes a DC you no longer have access to its local users and groups, consider that the SAM database ceases to exist.
so you wont lose anything.
aftertaf, don't forget about your fsmo roles. If that server you are demoting has any of the fsmo roles it would be better to transfer the role before demoting. After demoting, you would have to seize the role.
No you wouldn't. If a DC is successfully demoted with dcpromo, dcpromo will transfer the roles to another server. If there is more than one other DC, you may want to transfer them manually, so you know where they are going, but it isn't necessary.
You would only need to seize if a server was not gracefully demoted.
the only doubt that i have it's regarding the file's permissions (NTFS)
we are in native mode, 3 dc, one of this (the file server) will become a memeber server.(no fsmo roles on this dc)
it has two partitions the c: operating system and d: data for users.
all the permission are granted trough local domain local group...
i know that in mixed mode if you demote e dc to Memeber S.
you loose all the domain local group (like nt4)
just wanna to be sure that in native mode i will found mi domain local group also in my demoted member server
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.