Hi OK. I have already turn off my Windows DC. I will wait 3 days before demote my Windows Server DC. Thanks, Regards, M?rcio Bacci Em sex, 16 de ago de 2019 ?s 13:26, Rowland penny via samba < samba at lists.samba.org> escreveu:> On 16/08/2019 17:16, Marcio Demetrio Bacci via samba wrote: > > Hi, > > > >> If your replication is good and all is verified, you can turn off the > > windows DC. > >> I suggest, leave everyting as is. Wait 3-5 days. > > Replication between Samba 4 DC are OK. > > > > However, sometimes problems arise between Windows Server 2008 and Samba 4 > > records, usually related to attributes of 2 or 3 specific computers. > > > > I edit the Samba registry with ldbedit and everything is OK. After a > while > > the problem recurs again. This way, I want to remove Windows Server 2008 > DC > > from the domain. > > > > When I have transferred the roles ForestDNSZones and DomainDNSZones I had > > to use samba-tool fsmo seize, the others 5 roles I have transferred with > > samba-tool fsmo transfer without problems. > > > > My Samba 4 DC has been owner fsmo roles for 3 weeks. > > > >> Verify you logs. > > I have noticed DNS dynamic updates issues. > > > > I believe it's because my Windows Server 2008 DC servers were not Domain > > Authoritative DNS, so I had to integrate them with Active Directory > > manually. > > > > > I suggest you follow Louis's advice, turn off the Windows DC and wait, > if you get errors, you can turn the Windows DC back on, but I don't > think you will have to and I don't think you will have to wait long > before you have to. You will either get errors quickly or none at all. > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
Hi, I left the server off for 5 days. The Samba 4 DC Servers are apparently working fine. Now, I am unable to demote Windows Server 2008 Server through the DCPROMO tool. The following message appears: " *The operation failed because:Active Directory Domain Services could not find another Active Directory Domain Controller to transfer the remaining data to the directory partition DC = DomainDnsZones, DC = empesa, DC = com, DC = br.The specified domain either does not exist or could not be contacted.*" The Replication between servers (Samba 4 and Windows) is OK. Is it advisable for me to remove Windows DC manually? Regards, M?rcio Bacci Em sex, 16 de ago de 2019 ?s 13:42, Marcio Demetrio Bacci < marciobacci at gmail.com> escreveu:> Hi > > OK. I have already turn off my Windows DC. > > I will wait 3 days before demote my Windows Server DC. > > Thanks, > > Regards, > > M?rcio Bacci > > Em sex, 16 de ago de 2019 ?s 13:26, Rowland penny via samba < > samba at lists.samba.org> escreveu: > >> On 16/08/2019 17:16, Marcio Demetrio Bacci via samba wrote: >> > Hi, >> > >> >> If your replication is good and all is verified, you can turn off the >> > windows DC. >> >> I suggest, leave everyting as is. Wait 3-5 days. >> > Replication between Samba 4 DC are OK. >> > >> > However, sometimes problems arise between Windows Server 2008 and Samba >> 4 >> > records, usually related to attributes of 2 or 3 specific computers. >> > >> > I edit the Samba registry with ldbedit and everything is OK. After a >> while >> > the problem recurs again. This way, I want to remove Windows Server >> 2008 DC >> > from the domain. >> > >> > When I have transferred the roles ForestDNSZones and DomainDNSZones I >> had >> > to use samba-tool fsmo seize, the others 5 roles I have transferred with >> > samba-tool fsmo transfer without problems. >> > >> > My Samba 4 DC has been owner fsmo roles for 3 weeks. >> > >> >> Verify you logs. >> > I have noticed DNS dynamic updates issues. >> > >> > I believe it's because my Windows Server 2008 DC servers were not Domain >> > Authoritative DNS, so I had to integrate them with Active Directory >> > manually. >> > >> > >> I suggest you follow Louis's advice, turn off the Windows DC and wait, >> if you get errors, you can turn the Windows DC back on, but I don't >> think you will have to and I don't think you will have to wait long >> before you have to. You will either get errors quickly or none at all. >> >> Rowland >> >> >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> >
On 20/08/2019 16:06, Marcio Demetrio Bacci wrote:> Hi, > > I left the server off for 5 days. > > The Samba 4 DC Servers are apparently working fine. > > Now, I am unable to demote Windows Server 2008 Server through the > DCPROMO tool. > > The following message appears: > > "/The operation failed because: > > Active Directory Domain Services could not find another Active > Directory Domain Controller to transfer the remaining data to the > directory partition DC = DomainDnsZones, DC = empesa, DC = com, DC = br. > > The specified domain either does not exist or could not be contacted./" > > The Replication between servers (Samba 4 and Windows) is OK. > > Is it advisable for me to remove Windows DC manually? >Please tell me that you haven't turned your Windows DC back on again. If you have, is it connected to the domain ? If it is, then turn it off again and never turn it on again whilst it is connected to the domain. If everything is working correctly on your Samba DCs, once the Windows DC is disconnected, run: samba-tool domain demote --remove-other-dead-server=<THE_WINDOWS_DC> on one of the Samba DCs I would then take the Windows DC outside the domain (so it cannot connect) and then reinstall an OS on it, this will stop you ever bringing the Windows DC back again. Rowland