How to demote samba 4 dc with internal DNS

[Mark Pröhl]

Hi,

we are currently evaluating Samba 4.0.0 and are trying to demote a Samba 
DC that uses the SAMBA_INTERNAL DNS service.

All  5 FSMO roles have been transfered to a Windows DC (W2k8r2). 
However, the command "samba-tool domain demote" fails with: "ERROR: 
Current DC is still the owner of 2 role(s), use the role command to 
transfer roles to another DC".

The 2 roles seem to be related to application partitions ForestDNSZones 
and DomainDNSZones.

What is the right way to remove the Samba 4 DC  from these two 
application partitions to do a successful demotion?

Cheers,

Mark