{"id":411,"date":"2011-07-28T16:54:00","date_gmt":"2011-07-28T16:54:00","guid":{"rendered":"https:\/\/www.geekmungus.co.uk\/?p=411"},"modified":"2022-11-05T10:53:42","modified_gmt":"2022-11-05T10:53:42","slug":"access-denied-error-when-depromoting-a-domain-controller","status":"publish","type":"post","link":"https:\/\/geekmungus.co.uk\/?p=411","title":{"rendered":"&#8220;Access Denied&#8221; Error when Depromoting a Domain Controller"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">When depromoting a domain controller I started to get this error:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>&#8220;The operation failed because Active Directory could not configure the computer account &lt;COMPUTERNAME>$, on the remote domain controller &lt;COMPUTERNAME>$ &#8220;Access is denied.&#8221;<\/em><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/www.geekmungus.co.uk\/wp-content\/uploads\/2021\/07\/image-57.png\" alt=\"\" class=\"wp-image-412\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">What I did to try and fix it:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00b7&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Verified the \u201cprotect from accidental deletion\u201d tick box not set on the computer object properties \u201cobject\u201d tab, in this case it wasn\u2019t.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00b7&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; On the \u201cSecurity\u201d tab of the computer object clicked on \u201cDefault\u201d to reset the permissions, also ensured that there were no deny permissions applied. Also ran an effective permissions check on the computer object against the account I was using for the DCPROMO, again full rights, no denies listed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When it DCPROMOs out, it moves the computer object from \u201cDomain Controllers\u201d OU to the \u201cComputers\u201d container, this had these deny permissions set on it. So when the computer object was being depromoted and moved from \u201cDomain Controllers\u201d to \u201cComputers\u201d container it was getting access denied.<a href=\"http:\/\/www.winvistatips.com\/re-dcpromo-fails-t561703.html\"> http:\/\/www.winvistatips.com\/re-dcpromo-fails-t561703.html<\/a><strong>Solution:<\/strong> Was to remove the \u201cdeny\u201d permission from the container as shown above, then rebooted and retried the DCPROMO again and it worked fine.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/www.geekmungus.co.uk\/wp-content\/uploads\/2021\/07\/image-58.png\" alt=\"\" class=\"wp-image-413\"\/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>When depromoting a domain controller I started to get this error: &#8220;The operation failed because Active Directory could not configure the computer account &lt;COMPUTERNAME>$, on the remote domain controller &lt;COMPUTERNAME>$ &#8220;Access is denied.&#8221; What I did to try and fix it: \u00b7&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Verified the \u201cprotect from accidental deletion\u201d tick box not &#8230; <a title=\"&#8220;Access Denied&#8221; Error when Depromoting a Domain Controller\" class=\"read-more\" href=\"https:\/\/geekmungus.co.uk\/?p=411\" aria-label=\"Read more about &#8220;Access Denied&#8221; Error when Depromoting a Domain Controller\">Read more<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27,14],"tags":[],"class_list":["post-411","post","type-post","status-publish","format-standard","hentry","category-active-directory","category-microsoft-windows"],"_links":{"self":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/411","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=411"}],"version-history":[{"count":1,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/411\/revisions"}],"predecessor-version":[{"id":1522,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/411\/revisions\/1522"}],"wp:attachment":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=411"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=411"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}