[Samba] How to properly demote a W2003 from Samba4?

[Sam]

You're right Andrey, I can see only 5 roles with the "samba-tool fsmo 
show"...
I don't remember if I transfered 5 or 7 roles with the Ntdsutil command. 
I'm just sure that I transfer all availlable roles with this command...
I'm going to redo a try and if I see only 5 roles to transfer I will use 
the GUI for the 2 last...
Thank a lot!
Sam

Le 15/05/2015 18:03, Andrey Repin a écrit :
> Greetings, Sam!
>
>>>> Hello all,
>>>> I'm always trying to migrate from W2000 server to Samba 4.
>>>> For doing this, I tried this :
>>>> - install a W2003 server with AD and DNS services, join it to W2000,
>>>> transfer roles and after demote the old W2000 -> done
>>>> - install a Sernet Samba4 with Bind9, join W2003, transfer roles -> done
>>>> At this point the sync process is working in two way, I can manage DNS
>>>> and AD with rsat tool even directly on the Samba4 server... Which was
>>>> hard to do this to work properly! ;)
>>>> Now I can't demote the W2003 server, the only way I find is to use
>>>> "dcpromo.exe /froceremoval" command... ( the alone "dcpromo.exe" command
>>>> don't work... )
>>>> But now Samba4 always trying to contact the w2003 server and I can't
>>>> clean the dns and active directory, I've some error for example in
>>>> "domain controllers" section of the AD...
>>>> if I try "samba-tool domain level raise --domain-level=2008_R2" I read
>>>> "ERROR: Domain function level can't be higher than the lowest function
>>>> level of a DC!"
>>>> So how to do a clean demote process even manualy? ( I can't set up a
>>>> fresh new AD because I have too many users profile to move...)
>>>> Thanks for helping! :)
>>> Did you transfer all seven roles?
>> Hello Andrey,
>> Yes, I transfered all the available roles with the Ntdsutil command.
>> and samba-tool fsmo show return all roles.
>> regards
> For your future reference, "All" is not a number.
> samba-tool only aware of five roles to the best of my knowledge, unless it has
> been fixed already.
>
>