Netlogon service time out error message while promote domain controller

Author:

Yuval Sinay MVP

COMMUNITY SOLUTIONS CONTENT DISCLAIMER

MICROSOFT CORPORATION AND/OR ITS RESPECTIVE SUPPLIERS MAKE NO REPRESENTATIONS ABOUT THE SUITABILITY, RELIABILITY, OR ACCURACY OF THE INFORMATION AND RELATED GRAPHICS CONTAINED HEREIN. ALL SUCH INFORMATION AND RELATED GRAPHICS ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT AND/OR ITS RESPECTIVE SUPPLIERS HEREBY DISCLAIM ALL WARRANTIES AND CONDITIONS WITH REGARD TO THIS INFORMATION AND RELATED GRAPHICS, INCLUDING ALL IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, WORKMANLIKE EFFORT, TITLE AND NON-INFRINGEMENT. YOU SPECIFICALLY AGREE THAT IN NO EVENT SHALL MICROSOFT AND/OR ITS SUPPLIERS BE LIABLE FOR ANY DIRECT, INDIRECT, PUNITIVE, INCIDENTAL, SPECIAL, CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF USE, DATA OR PROFITS, ARISING OUT OF OR IN ANY WAY CONNECTED WITH THE USE OF OR INABILITY TO USE THE INFORMATION AND RELATED GRAPHICS CONTAINED HEREIN, WHETHER BASED ON CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY OR OTHERWISE, EVEN IF MICROSOFT OR ANY OF ITS SUPPLIERS HAS BEEN ADVISED OF THE POSSIBILITY OF DAMAGES.

SYMPTOMS

When you try to run DCPROMO to demote Windows 2000/2003 Domain Controller, you may receive this error message - Netlogon service timeout.  

CAUSE

If some service that dependent on Active Directory connect to the Domain Controller while trying to remove from it the Active Directory, this message can appear.
A common applications that use Active Directory: Exchange Server, Systems Management Server 2003 Server, ISA Server Enterprise, Live Communication Server 2003, Instant Message. Services For Unix 2-3.5.

RESOLUTION

1. Its recommend to read and follow the instructions in:
 
   Understanding and Troubleshooting Directory Access
 
   
 
2. Stop any service depend Active Directory on the server it self.
 
3. Before demote the server verity that FSMO roles moved to another server.
 
4. If the Domain Controller that need to be demote function also has Global Catalog, remove Global Catalog function and reboot the server
     to allow the new settings to be affective in the Active Directory. The update time of the Active Directory to the new configurations may take
     up to few days - depend on replication structure of your Active Directory.
 
5. If the Domain Controller function also has DNS server, transfer the service to another server - you may need also to change the local network configuration and 
       reboot the server to allow the new settings to be affective in the Active Directory.
 
6. Verity time synchronization between the Domain Controller and the PDC Emulator.

MORE INFORMATION

Understanding and Troubleshooting Directory Access

 
HOW TO: View and Transfer FSMO Roles in Windows Server 2003

 
Active Directory Operations Guide

गुण

आलेख ID: 555078 - पिछली समीक्षा: 14/02/2017 - संशोधन: 1

Microsoft Windows Server 2003, Enterprise Edition (32-bit x86), Microsoft Windows Server 2003, Enterprise Edition (32-bit x86), Microsoft Windows Server 2003, Standard Edition (32-bit x86), Microsoft Windows Server 2003, Enterprise Edition (32-bit x86), Microsoft Windows Server 2003, Enterprise Edition (32-bit x86), Microsoft Windows Server 2003, Datacenter Edition (32-bit x86), Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems, Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems, Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems, Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems, Microsoft Exchange 2000 Server Standard Edition, Microsoft Exchange 2000 Enterprise Server, Microsoft Exchange Server 2003 Enterprise Edition

प्रतिक्रिया