FSMO promotion

[bundeyp]

I have 2 node cluster running windows 2002 with AD. I have just setup a new Windows 2003 server on an ESX box and the aim was to move the AD to the new box. I de-promoted one of the windows 2000 servers with no problem which left me with the master DC. I joined the windows 2003 server as a DC and it replicated the AD fine. I then needed to move the FSMO roles to the 2003 server. I went into the AD users and Computers and moved the roles through the Operations Master and then the Global Cat. All appeared fine stating the new server had the roles.
When I now log back into the old 2000 server and attempt to de-promote the AD it comes up with errors stating the domain controller could not be contacted / specified domain doesn't exit. I look under AD users and Operations Master and it has ERROR in RID/PDC and infrastructure. If i turn off the old 2000 server you can't login. Any ideas how to solve this issue?

 

[Dublin73]

Do you have all 5 FSMO roles in place? Here's how to transfer them...

http://support.microsoft.com/kb/324801

You don't mention DNS. "SRV" records are required in DNS so that domain controllers can be located. See here

http://www.petri.co.il/active_directory_srv_records.htm

What mode is your forest in?

http://www.petri.co.il/understanding_function_levels_in_windows_2003_ad.htm

 

[58sniper]

I have 2 node cluster running windows 2002 with AD.

So many things wrong with that sentence. First, Windows 2002?

Last I checked it's not recommended or supported to have a domain controller be a cluster node.

When you run netdom query FSMO from each of the servers, are the results all the same?

Pat Richard
Microsoft Exchange MVP
Contributing author Microsoft Exchange Server 2007: The Complete Reference

 

[bundeyp]

Thanks for your reply. I meant Windows 2000 and I haven't actualy clustered the AD. My mistake I didn't explain correctly. Anyway yes I have moved all the roles to the Windows 2003 server and they say that all is okay. It's only the Windows 2000 server stating errors that won't allow me to take it out from being an Domain Controller. The DNS is running in BIND and all appears to be okay.
The forest is in mixed mode.
In Sites and Services I can't replicated between the 2 servers. I will need to check the FSMO roles when I get back. I believe that you can run the tool ntdsutil. Would this help ?