I am unable to demote Windows DCs that are also acting as DNS servers. To be clear, this only occurs if the Windows Server is also a DNS server. The problem appears to be that the 2008R2 server fails replicating data back to the S4 DC during the demotion. The specific error that I receive on the Windows server when running "dcpromo" is: The operation failed because: Active Directory Domain Services could not transfer the remaining data in the directory partition CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com to Active Directory Domain Controller adc1.internal.testdom.com I receive the following when trying to replicate using samba-tool (adc1=S4rc5 adc2=2008R2): [root@ADC1 etc]# samba-tool drs replicate adc1 adc2 CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com -U Administrator Password for [TESTDOM\Administrator]: ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (2, 'WERR_BADFILE') File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/drs.py", line 334, in run drs_utils.sendDsReplicaSync(self.drsuapi, self.drsuapi_handle, source_dsa_guid, NC, req_options) File "/usr/local/samba/lib64/python2.6/site-packages/samba/drs_utils.py", line 83, in sendDsReplicaSync raise drsException("DsReplicaSync failed %s" % estr) Replication from adc1 to adc2 works: [root@ADC1 etc]# samba-tool drs replicate adc2 adc1 CN=Schema,CN=Configuration,DC=internal,DC=testdom,DC=com -U Administrator Password for [TESTDOM\Administrator]: Replicate from adc1 to adc2 was successful. This problem is consistent and can be reproduced as follows (tested on Ubuntu 12.04LTS and CentOS 6.3): 1) Provision S4rc5 (clean or classicupgrade) 2) Join a Windows Server to the domain (I used 2008R2) 3) Promote the Windows Server to function as AD DC + DNS Server via "dcpromo". 4) Attempt to demote the Windows Server via "dcpromo".
No 4.1 blocker => 4.2
Any news on this one?