[Samba] How to properly demote a W2003 from Samba4?

[Andrey Repin]

Greetings, Sam!

>>> Hello all,
>>> I'm always trying to migrate from W2000 server to Samba 4.
>>> For doing this, I tried this :
>>> - install a W2003 server with AD and DNS services, join it to W2000,
>>> transfer roles and after demote the old W2000 -> done
>>> - install a Sernet Samba4 with Bind9, join W2003, transfer roles -> done
>>> At this point the sync process is working in two way, I can manage DNS
>>> and AD with rsat tool even directly on the Samba4 server... Which was
>>> hard to do this to work properly! ;)
>>> Now I can't demote the W2003 server, the only way I find is to use
>>> "dcpromo.exe /froceremoval" command... ( the alone "dcpromo.exe" command
>>> don't work... )
>>> But now Samba4 always trying to contact the w2003 server and I can't
>>> clean the dns and active directory, I've some error for example in
>>> "domain controllers" section of the AD...
>>> if I try "samba-tool domain level raise --domain-level=2008_R2" I read
>>> "ERROR: Domain function level can't be higher than the lowest function
>>> level of a DC!"
>>> So how to do a clean demote process even manualy? ( I can't set up a
>>> fresh new AD because I have too many users profile to move...)
>>> Thanks for helping! :)
>> Did you transfer all seven roles?

> Hello Andrey,
> Yes, I transfered all the available roles with the Ntdsutil command.
> and samba-tool fsmo show return all roles.
> regards

For your future reference, "All" is not a number.
samba-tool only aware of five roles to the best of my knowledge, unless it has
been fixed already.


-- 
With best regards,
Andrey Repin
Friday, May 15, 2015 19:02:29

Sorry for my terrible english...