Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Active Directory Installation Wizard returns error during demotion


Symptoms

Active Directory Installation Wizard returns returns error during demotion: "The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles."

↑ Back to the top


Cause

During domain controller (DC) demotion, The Active Directory Installation Wizard (DCPromo.exe) must replicate out the changes for every naming context (NC) hosted by the DC before it is demoted so that no changes made to the directory are lost. It tries to transfer the changes to the infrastructure master of the NC because the infrastructure master of an NC is assumed to always be available. When the DC is unable to replicate its changes because the infrastructure master of an NC is not abvailable, the demotion fails as a safeguard against data loss.

↑ Back to the top


Resolution

For every NC, the infrastructure master is determined by the value of the fSMORoleOwner attribute on the CN=Infrastructure object of the NC.

For instance, the infrastructure owner for DomanDnsZones is specified at the fSMORoleOwner attribute of CN=Infrastructure,DC=DomainDnsZones,DC=contoso,DC=com

When the infrastructure owner of a non-domain naming context (NDNC) such as DomainDnsZones is not available, changes to this object have to be done at the infrastructure master of the domain NC. Any attempts to modify this object on another DC will return error WILL_NOT_PERFORM, as a safeguard against conflicting changes to the FSMO role ownership.


To resolve the error and continue with the demotion, use ADSIEdit to set the fSMORoleOwner attribute of the NDNC (for example, the object CN=Infrastructure,DC=DomainDnsZones,DC=contoso,DC=com) to the NTDS Settings object of an available DC. (note that the attribute must point to the NTDS Settings object and not to the Server object). For example:

CN=NTDS Settings,CN=DC-03,CN=Servers,CN=PDC-Site,CN=Sites,CN=Configuration,DC=contoso,DC=com

Once the change is made and it’s replicated to the DC being demoted, the DC is able to contact the new FSMO owner, replicate the changes successfully and finish the demotion without issues.

↑ Back to the top


Keywords: kb

↑ Back to the top

Article Info
Article ID : 2696188
Revision : 1
Created on : 1/7/2017
Published on : 4/27/2012
Exists online : False
Views : 105