help how to demote domain conntroller running windows 2000 and exchange server 2003 and use it as only domain member - Microsoft Exchange

In news:e3VBja3PHHA.4992@TK2MSFTNGP04.phx.gbl,
wael elsayid aly <welsayid@etrr2-aea.org.eg> typed:
> help
> i have one active domain in mixed mode (2000/windows nt)
> one server as global catalog and Domain controller call it SERVER2
> with DNS primary server and wins, IIS server (windows 2000 sp4)
> one server ad DC call it SERVER1 and as backup DC and also DNS, WINS
> (windows 2000 sp4).
>
> the two abouve have on problem with replica or any thing
>
> and the third one which is the source of all problem
> this is a server was running WINNT DOMAIN BEFORE SO HAS BEEN UPGRADE
> TO 2000 ACTIVE DOMAIN
>
> this server call it MAIL act as DC ( i know i was stuiped ) and has
> exchange server 2003 and IIS, WINS, DNS, all was working fine untill
> a power failure so i lost the replica and the trust cant be given to
> join the domain again ( and i have made every thing possible to
> correct it )

Do you have good full backups? What are the exact errors? You have more than
an Exchange problem here.

> any way i end with this
> i wont to remove this server from it's role as DC and put it as domain
> member in the active domain

Do not run dcpromo on a server running Exchange....either to promote it to a
DC, or to demote it to a member server.

> the replica is know lost

Is your other DC fully functional? Can you transfer the FSMO roles to it (if
not, sieze them)?

> i can ping it from other DC

Can you actually boot up the box & get Exchange running at all?


> the netdom work but keep till me on the GC server the main DC
> (server2) that this server (MAIL) ACCESS DENAIED
> as i said i need remove it from active domain
> so i need to do something on server1, server2 from the domain and
> also DNS , and also on the MAIL to demote it locally
> but i do not know haw and i need to keep this exchange server keep
> running on it ? can it happen and if not how to remove this machine
> account from active domain so i can add it again without any problem
> because i must have the same ip and dns name so that my internet mail
> work because it is fully qualifed dns name (mail.xxxxx.org.eg)
> thanks
> wael

One other note - you need to get good, managed UPS units so that your
servers can do a graceful shutdown in the event of a power failure.

ok
1- lest start be say i do not have a good backup
2 - run dcpromo on the server running exchange 2003 (mail server) to demote
it first it fail then i run dcpremo /forceremoval i do not remember the
excact command now and it work great
3 - on the other DC's the GC and the DC (server2, and server1) i try to do
ntdsutil command but it give me errors i the begain to work with dns and
wins servers
in my case server2 was the primary dns server i delete all dns refrence to
it and with adsedit.msc as i remember i manualy delete all thing related
with the mail server ( the replica ,....)
i do a lot of thing here, and did this in the GC and the backup dc (server
2, server 1) and put the mail offline
at last
i end with this
running dcdaig on both server2 (GC) and server1 (DC) give no ERROR, the
replica work great
DNS servers' now became server2, server1 and primary WINS servers are
server2, server1
all users where able to log on active domain with no problem

on the mail server (offline) i delete DNS, WINS server on it, i saw that the
server became as workgroup
when i ping the mail server on the other machine the host is unknown and
this is ok.
on the server2 i put a computer account mail in computers on the active
doman
then in the mail server i put primary dns as server2, and secondary as
server1
i put it online

after it boot i can ping server2 , server 1 from mail with server dns name
and i do the same from them

i can do nslookup from them to mail server and from mail server to server2,
server1

and dcdiag give no error on server2, server1

in dns the mail computer was listed as it's ip

i join the mail server to active domain as stand alone server and work

then i add the exchange server record in dns of server2, server1

and reboot all

now i end with the result that exchange service (information store, MTA)
DOES NOT START because it took a very long time and the Kerberos cant not
start on that server an error relatd with RPC,
in service the Kerberos are in manual mode and display stoppeing and when
i try to start it it took to long to respond and do not start



"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:%234S13W8PHHA.404@TK2MSFTNGP02.phx.gbl...
> In news:e3VBja3PHHA.4992@TK2MSFTNGP04.phx.gbl,
> wael elsayid aly <welsayid@etrr2-aea.org.eg> typed:
>> help
>> i have one active domain in mixed mode (2000/windows nt)
>> one server as global catalog and Domain controller call it SERVER2
>> with DNS primary server and wins, IIS server (windows 2000 sp4)
>> one server ad DC call it SERVER1 and as backup DC and also DNS, WINS
>> (windows 2000 sp4).
>>
>> the two abouve have on problem with replica or any thing
>>
>> and the third one which is the source of all problem
>> this is a server was running WINNT DOMAIN BEFORE SO HAS BEEN UPGRADE
>> TO 2000 ACTIVE DOMAIN
>>
>> this server call it MAIL act as DC ( i know i was stuiped ) and has
>> exchange server 2003 and IIS, WINS, DNS, all was working fine untill
>> a power failure so i lost the replica and the trust cant be given to
>> join the domain again ( and i have made every thing possible to
>> correct it )
>
> Do you have good full backups? What are the exact errors? You have more
> than an Exchange problem here.
>
>> any way i end with this
>> i wont to remove this server from it's role as DC and put it as domain
>> member in the active domain
>
> Do not run dcpromo on a server running Exchange....either to promote it to
> a DC, or to demote it to a member server.
>
>> the replica is know lost
>
> Is your other DC fully functional? Can you transfer the FSMO roles to it
> (if not, sieze them)?
>
>> i can ping it from other DC
>
> Can you actually boot up the box & get Exchange running at all?
>
>
>> the netdom work but keep till me on the GC server the main DC
>> (server2) that this server (MAIL) ACCESS DENAIED
>> as i said i need remove it from active domain
>> so i need to do something on server1, server2 from the domain and
>> also DNS , and also on the MAIL to demote it locally
>> but i do not know haw and i need to keep this exchange server keep
>> running on it ? can it happen and if not how to remove this machine
>> account from active domain so i can add it again without any problem
>> because i must have the same ip and dns name so that my internet mail
>> work because it is fully qualifed dns name (mail.xxxxx.org.eg)
>> thanks
>> wael
>
> One other note - you need to get good, managed UPS units so that your
> servers can do a graceful shutdown in the event of a power failure.
>
>

In news:uw7u4Y9PHHA.3668@TK2MSFTNGP02.phx.gbl,
wael elsayid aly <welsayid@etrr2-aea.org.eg> typed:
> ok
> 1- lest start be say i do not have a good backup

Oh, that's not good; I hope you have plans remedy that immediately after you
get this all fixed.

I'm sorry to say that I am having a very hard time following all of this
from your post - I realize that you may not be a native English speaker, but
it's hard to read this and follow it. Note that it would help if you could
use proper capitalization & separate paragraphs
to make it easier to read.

What you have here is far larger than an Exchange server issue, at least
now. Given everything that has happened, and what you have done in an
attempt to
correct it (which has probably made things worse), I suspect at this point
you may be best off contacting Microsoft product support services directly
and opening a case with them - it's a flat-rate charge per incident and you
will likely get more expert help there.

> 2 - run dcpromo on the server running exchange 2003 (mail server) to
> demote it first it fail then i run dcpremo /forceremoval i do not
> remember the excact command now and it work great
> 3 - on the other DC's the GC and the DC (server2, and server1) i try
> to do ntdsutil command but it give me errors i the begain to work
> with dns and wins servers
> in my case server2 was the primary dns server i delete all dns
> refrence to it and with adsedit.msc as i remember i manualy delete
> all thing related with the mail server ( the replica ,....)
> i do a lot of thing here, and did this in the GC and the backup dc
> (server 2, server 1) and put the mail offline
> at last
> i end with this
> running dcdaig on both server2 (GC) and server1 (DC) give no ERROR,
> the replica work great
> DNS servers' now became server2, server1 and primary WINS servers are
> server2, server1
> all users where able to log on active domain with no problem
>
> on the mail server (offline) i delete DNS, WINS server on it, i saw
> that the server became as workgroup
> when i ping the mail server on the other machine the host is unknown
> and this is ok.
> on the server2 i put a computer account mail in computers on the
> active doman
> then in the mail server i put primary dns as server2, and secondary as
> server1
> i put it online
>
> after it boot i can ping server2 , server 1 from mail with server dns
> name and i do the same from them
>
> i can do nslookup from them to mail server and from mail server to
> server2, server1
>
> and dcdiag give no error on server2, server1
>
> in dns the mail computer was listed as it's ip
>
> i join the mail server to active domain as stand alone server and work
>
> then i add the exchange server record in dns of server2, server1
>
> and reboot all
>
> now i end with the result that exchange service (information store,
> MTA) DOES NOT START because it took a very long time and the Kerberos cant
> not start on that server an error relatd with RPC,
> in service the Kerberos are in manual mode and display stoppeing
> and when i try to start it it took to long to respond and do not
> start
>
>
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in
> message news:%234S13W8PHHA.404@TK2MSFTNGP02.phx.gbl...
>> In news:e3VBja3PHHA.4992@TK2MSFTNGP04.phx.gbl,
>> wael elsayid aly <welsayid@etrr2-aea.org.eg> typed:
>>> help
>>> i have one active domain in mixed mode (2000/windows nt)
>>> one server as global catalog and Domain controller call it SERVER2
>>> with DNS primary server and wins, IIS server (windows 2000 sp4)
>>> one server ad DC call it SERVER1 and as backup DC and also DNS, WINS
>>> (windows 2000 sp4).
>>>
>>> the two abouve have on problem with replica or any thing
>>>
>>> and the third one which is the source of all problem
>>> this is a server was running WINNT DOMAIN BEFORE SO HAS BEEN UPGRADE
>>> TO 2000 ACTIVE DOMAIN
>>>
>>> this server call it MAIL act as DC ( i know i was stuiped ) and has
>>> exchange server 2003 and IIS, WINS, DNS, all was working fine untill
>>> a power failure so i lost the replica and the trust cant be given to
>>> join the domain again ( and i have made every thing possible to
>>> correct it )
>>
>> Do you have good full backups? What are the exact errors? You have
>> more than an Exchange problem here.
>>
>>> any way i end with this
>>> i wont to remove this server from it's role as DC and put it as
>>> domain member in the active domain
>>
>> Do not run dcpromo on a server running Exchange....either to promote
>> it to a DC, or to demote it to a member server.
>>
>>> the replica is know lost
>>
>> Is your other DC fully functional? Can you transfer the FSMO roles
>> to it (if not, sieze them)?
>>
>>> i can ping it from other DC
>>
>> Can you actually boot up the box & get Exchange running at all?
>>
>>
>>> the netdom work but keep till me on the GC server the main DC
>>> (server2) that this server (MAIL) ACCESS DENAIED
>>> as i said i need remove it from active domain
>>> so i need to do something on server1, server2 from the domain and
>>> also DNS , and also on the MAIL to demote it locally
>>> but i do not know haw and i need to keep this exchange server keep
>>> running on it ? can it happen and if not how to remove this machine
>>> account from active domain so i can add it again without any problem
>>> because i must have the same ip and dns name so that my internet
>>> mail work because it is fully qualifed dns name (mail.xxxxx.org.eg)
>>> thanks
>>> wael
>>
>> One other note - you need to get good, managed UPS units so that your
>> servers can do a graceful shutdown in the event of a power failure.