Error Message Occurs When You Demote a Domain Controller (282272)
The information in this article applies to:
- Microsoft Windows Server 2003, Enterprise Edition
- Microsoft Windows Server 2003, Standard Edition
This article was previously published under Q282272 SYMPTOMS When you demote a Windows domain controller by using the
Active Directory Installation wizard (Dcpromo.exe), you may receive a the following error message: This domain controller holds the last replica of the following application directory partitions:
DC=MSTAPI,DC=yourdomain,DC=com
CAUSE This behavior can occur if you installed the domain
controller by using the Configure Your Server wizard. When you use this wizard, it
automatically creates a program partition or a non-domain naming context called
DC=MSTAPI,DC=yourdomain,DC=com. RESOLUTION If you created the partition by using the Configure Your Server
wizard, and you used the default name of Mstapi, if this name is not in use,
use the Tapicfg.exe tool to remove this name. To do so, run the following
command, where your_domain.com is
your domain DNS name: tapicfg remove /directory:mstapi.your_domain.com If the partition was created manually, or if
it was created by using another program, you can remove it by using the
Ntdsutil utility: - Open a command prompt , and then type
ntdsutil.
- From the Ntdsutil prompt, type domain
management.
- In the Domain Management window, type
connections.
- Type connect to server
yourservername.
After the binding message appears, you will have a
successful connection to your server. - In the Server Connections window, type
quit.
- In the Domain Management window, type
list. A list of the naming contexts on this server appears.
- To remove the application directory partition replica, type remove nc replica ApplicationDirectoryPartitionDomainController.
- At the Ntdsutil prompt, type Q, and
then press ENTER until you are returned to the CMD command prompt.
You can now successfully demote this domain
controller. You may have to restart this domain controller before you start the
Active Directory Installation wizard again. MORE INFORMATION Windows supports program naming contexts, also referred to
as non-domain naming contexts. This feature allows the MIcrosoft Active Directory directory service to host
dynamic data without significantly impacting network performance by enabling
you to control the scope of replication and placement of replicas. With Active
Directory services, you can create a new type of naming context or partition,
referred to as the application partition. This naming context can contain a
hierarchy of any type of object except security principals (users, groups, and
computers), and it can be configured to replicate to any set of domain controllers
in the forest that are not necessarily all in the same domain.
| Modification Type: | Minor | Last Reviewed: | 1/25/2006 |
|---|
| Keywords: | kbenv kberrmsg kbprb KB282272 |
|---|
|