none
DCPROMO FAILS -The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles.

    Question

  • Dear Team,

    I have three domain controller in my domain(A,B,C). In which 2 (A,B) is GC. today I try to remove the 3 DC that is not GC. through dcpromo cmd. that time i am getting an error :-

    Error is :- 

    The operation failed because:
    
    Active Directory Domain Services could not transfer the remaining data in directory partition DC=DomainDnsZones,DC=dc,DC=abc,DC=com to
    Active Directory Domain Controller \\B.dc.abc.com.
    
    "The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles.

    I  have check event id (every thing is right ) & dcdaig (there is also no failed show.)

    All FSMO is hold in SERVER A.

    Plaese help for


    vivek singh


    • Edited by vivek12rana Wednesday, April 5, 2017 6:49 AM
    Wednesday, April 5, 2017 6:38 AM

All replies

  • Do you have any FSMO roles on 3rd DC ?

    If yes move them to DC A or B then try to run Dcpromo again.


    My Blog: www.ADExchangeAdmin.com

    Wednesday, April 5, 2017 9:21 AM
  • Check this article by Philip Elder that discusses the similar issue:

    http://blog.mpecsinc.ca/2011/03/ad-ds-operation-failed-directory.html


    My Blog: www.ADExchangeAdmin.com

    Wednesday, April 5, 2017 9:24 AM
  • Dear Team,

    I have three domain controller in my domain(A,B,C). In which 2 (A,B) is GC. today I try to remove the 3 DC that is not GC. through dcpromo cmd. that time i am getting an error :-

    Error is :- 

    The operation failed because:
    
    Active Directory Domain Services could not transfer the remaining data in directory partition DC=DomainDnsZones,DC=dc,DC=abc,DC=com to
    Active Directory Domain Controller \\B.dc.abc.com.
    
    "The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles.

    I  have check event id (every thing is right ) & dcdaig (there is also no failed show.)

    All FSMO is hold in SERVER A.

    Plaese help for


    vivek singh


    Hi

     Check this ms article about the issue;

    https://support.microsoft.com/en-us/help/2696188/active-directory-installation-wizard-returns-error-during-demotion

    Also these similar cases;

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/a56a351f-c3f8-4ad3-bbe6-6a26fafa19a8/demoting-a-domain-controller-error?forum=winserverDS

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/cb04df5c-5778-416c-abdf-285aad2c27d1/dcpromo-fails-because-of-fsmo-rolesnormal-solutions-not-working?forum=winserverDS

    Otherwise you should try to forcefully demote this DC then perform metedata cleanup;

    Forcing the Removal of a Domain Controller

    https://technet.microsoft.com/en-us/library/cc731871%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

    Clean Up Server Metadata

    https://technet.microsoft.com/en-us/library/cc816907(v=ws.10).aspx


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Wednesday, April 5, 2017 9:44 AM
  • Hi,
    >> "The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles.
    Regarding this error, please check the following KB to see if it helps:
    DCPROMO demotion fails if unable to contact the DNS infrastructure master
    https://support.microsoft.com/en-au/help/2694933/dcpromo-demotion-fails-if-unable-to-contact-the-dns-infrastructure-master
    https://support.microsoft.com/en-us/help/949257/error-message-when-you-run-the-adprep-rodcprep-command-in-windows-server-2008-adprep-could-not-contact-a-replica-for-partition-dc-domaindnszones,dc-contoso,dc-com
    Best regards, 
    Wendy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Thursday, April 6, 2017 7:00 AM
    Moderator
  • Hi,

    Was your issue resolved? If you resolved it using our solution, please "mark it as answer" to help other community members find the helpful reply quickly.

    If you resolve it using your own solution, please share your experience and solution here. It will be very beneficial for other community members who have similar questions. If no, please reply and tell us the current situation in order to provide further help.

    Best Regards,

    Wendy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Monday, April 10, 2017 1:55 PM
    Moderator
  • All FSMO role hold A server .(A.dc.abc.com.)


    But error show on B server .(B.dc.abc.com.)

    Active Directory Domain Services could not transfer the remaining data in directory partition DC=DomainDnsZones,DC=dc,DC=abc,DC=com to
    Active Directory Domain Controller \\B.dc.abc.com.


    vivek singh



    • Edited by vivek12rana Wednesday, April 19, 2017 10:44 AM
    Wednesday, April 19, 2017 10:37 AM
  • Hi Hassan,

    when check my server B Directory services logs. there two event Id generate continuously. Event Id 1083 & 1955 task category is replication.

    Event ID 1955 error:-

    Active Directory Domain Services encountered a write conflict when applying replicated changes to the following object.
     
    Object:
    CN=Administrator,CN=Users,DC=dc,DC=catamarancorp,DC=com
    Time in seconds:
    0
     
    Event log entries preceding this entry will indicate whether or not the update was accepted.
     
    A write conflict can be caused by simultaneous changes to the same object or simultaneous changes to other objects that have attributes referencing this object. This commonly occurs when the object represents a large group with many members, and the functional level of the forest is set to Windows 2000. This conflict triggered additional retries of the update. If the system appears slow, it could be because replication of these changes is occurring.
     
    User Action
    Use smaller groups for this operation or raise the forest functional level to Windows Server 2003.

    Event id 1083 error show:-

    Active Directory Domain Services could not update the following object with changes received from the directory service at the following network address because Active Directory Domain Services was busy processing information.
     
    Object:
    CN=Administrator,CN=Users,DC=dc,DC=catamarancorp,DC=com
    Network address:
    2785256b-8745-41b6-9cab-1b48c3ebbb54._msdcs.dc.catamarancorp.com
     
    This operation will be tried again later.

    I have check repadmin /test:replication ,dcdiag . in which every thing is passed.


    vivek singh

    Thursday, April 20, 2017 7:11 AM
  • Hi,
    Based on my research, this errors generally occur when a duplicate connection object exists in Active Directory of the destination replication partner. Because this connection object is used to facilitate replication with the local domain controller, updates are impossible when replication does occur. 
    And as you have removed 3 DCs, please make sure to do their metadata cleanup and see if it helps: https://technet.microsoft.com/en-us/library/cc816907%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396
    Best regards, 
    Wendy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Monday, April 24, 2017 2:13 AM
    Moderator