Issue demoting s4 DC

Kristofer kristofer at
Mon Dec 17 15:46:48 MST 2012

I had tried using the ADUC tool, and it gave me a slew of errors and wouldn't remove the server either. I went in with AD Explorer and manually removed the relevant objects referencing the dead server(s) and that seems to have done it. I haven't seen any major repercussions from it, so I think I hit all of the proper ones. 

----- Original Message -----

From: "Andrew Bartlett" <abartlet at> 
To: "Kristofer" <kristofer at> 
Cc: samba-technical at 
Sent: Monday, December 17, 2012 3:39:02 PM 
Subject: Re: Issue demoting s4 DC 

On Thu, 2012-12-13 at 22:11 -0600, Kristofer wrote: 
> Hello, 
> I am attempting to demote a domain controller, and am receiving the following error. On other servers I am receiving NT_STATUS_IO_TIMEOUT. It doesn't seem as though I can demote any of my DC's. Are there any workarounds to manually demote (for example, after a hard server crash where the server can't be recovered)? 

The recommendation so far has been to use ADUC to remove the domain 
controller as 'dead, never coming back'. 

I would like our demote tool to do that too, but I've just not got 
around to it. Patches or filed bugs welcome :-) 


Andrew Bartlett 

Andrew Bartlett 
Authentication Developer, Samba Team 

More information about the samba-technical mailing list