demoting dc to memeber server losing ntfs permissions?

[amarchi]

Hi
i'm demoting my dc to memeber server.
It's store all user data with ntfs permissions.
Just wanna to be sure that demoting my dc, the memebr server will keep all ntfs permissions
is it true?

)
thanks
Max

 

[technome]

With a single dc...
When you demote, you loose users, passwords and ntfs settings but you data remains.

 

[aftertaf]

true, if it is the last domain controller you effectively will lose your domain, and all the users and groups in it. Which means all your access control lists on the files and folders will reference users & group that no longer exist.

if it's not your last DC for this domain, you're fine.



Aftertaf (david)
MCSA 2003

 

[amarchi]

I apologize to not have been clear
no this is not my last domain controller......
i have total of 3 dc.

I have understood that i'm fine demoting the dc to memeber server

thanks for your help and time
Max

 

[amarchi]

oops

but if are all local group on my dc?
when will be a member server?

max

 

[aftertaf]

domain local groups.

domain, therefore in active directory.

as you have 3DCs, the two remaining will still maintain a copy of the directory service and all its objects, including 'local groups'
when a server becomes a DC you no longer have access to its local users and groups, consider that the SAM database ceases to exist.
so you wont lose anything.

Aftertaf (david)
MCSA 2003

 

[mrmoneymatters]

aftertaf, don't forget about your fsmo roles. If that server you are demoting has any of the fsmo roles it would be better to transfer the role before demoting. After demoting, you would have to seize the role.

 

[mlichstein]

After demoting, you would have to seize the role.

No you wouldn't. If a DC is successfully demoted with dcpromo, dcpromo will transfer the roles to another server. If there is more than one other DC, you may want to transfer them manually, so you know where they are going, but it isn't necessary.

You would only need to seize if a server was not gracefully demoted.

 

[amarchi]

thanks for your replay

the only doubt that i have it's regarding the file's permissions (NTFS)

we are in native mode, 3 dc, one of this (the file server) will become a memeber server.(no fsmo roles on this dc)
it has two partitions the c: operating system and d: data for users.
all the permission are granted trough local domain local group...
i know that in mixed mode if you demote e dc to Memeber S.
you loose all the domain local group (like nt4)
just wanna to be sure that in native mode i will found mi domain local group also in my demoted member server

thanks in advance
Max

 

[aftertaf]

as they are stored in AD, no problem!

Aftertaf (david)
MCSA 2003

 

[amarchi]

thanks DAvid

 

[mrmoneymatters]

mlichstein, you are correct, what the hell was I thinking.

 

[aftertaf]

lol.
it happens

Aftertaf
if its not broken, fix it anyway - with luck you might break it and have an excuse