Cannot unjoin servers from my domain (Win2k3)
Hi,We recently tried to unjoin and then re-join one of our servers from/to the domain. When we tried to unjoin that server from the domain, using the built-in administrator account, we gotthe following error message:"The following error occurred attempting to unjoin the domain "mvs.co.il":access is denied".After googling it I found out about the NetSetup.log file and I looked at it and this is what I found there: 07/07 16:55:06 ----------------------------------------------------------------- 07/07 16:55:06 NetpUnJoinDomain: unjoin from 'SW1' using 'sw1\administrator' creds, options: 0x0 07/07 16:55:06 OS Version: 5.2 07/07 16:55:06 Build number: 3790 07/07 16:55:06 ServicePack: Service Pack 2 07/07 16:55:06 NetpUnJoinDomain: status of getting computer name: 0x0 07/07 16:55:06 NetpApplyJoinState: actions: 0x2b005a 07/07 16:55:06 Failed to open SCManager 07/07 16:55:06 NetpApplyJoinState: status of stopping and setting start type of Netlogon to 16: 0x5 07/07 16:55:06 NetpApplyJoinState: initiating a rollback due to earlier errors 07/07 16:55:06 NetpApplyJoinState: actions: 0x40000 07/07 16:55:06 NetpGetLsaPrimaryDomain: status: 0x0 07/07 16:55:06 NetpUnJoinDomain: status: 0x5 Some additional info:SW1 = This is our oldnetbios name of the domain.mvs.co.il = This is our new dns name of the domain.Thanks in advance,Yuval.YuvalK
July 7th, 2009 5:00pm

Hello,is the server domain controller or member server? A member server you can just bring into workgroup with the local administrator account. A DC has to be demoted with dcpromo.So please explain more detailed what you are doing.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
July 7th, 2009 5:03pm

If it's a member server, you can just unplug the network cables, put in any credentials and it will unjoin without a problem.If it's a DC, it's a completely different ball game.
July 7th, 2009 5:12pm

Hi,It's a member server but even with or without the network cables with any credentials (local built-in admin, domain built-in admin, my own user)I get the same error message.Tnx,Yuval.YuvalK
Free Windows Admin Tool Kit Click here and download it now
July 8th, 2009 6:37am

Hi, According to the following message, it seems that it failed to change the status of the service: 07/07 16:55:06 Failed to open SCManager 07/07 16:55:06 NetpApplyJoinState: status of stopping and setting start type of Netlogon to 16: 0x5 You can manually restart the netlogon service and check if you encounter an Access is denied error. A possible cause of this issue could be that you configured the System Services policy (Computer Configuration\Windows Settings\Security Settings\System Services) to change the security setting for the Net Logon service. You can run rsop.msc on the member server to verify it. If there is no System Services policy applied to the server, please refer to the following article to reset the permission for the netlogon service: http://support.microsoft.com/?id=257247 Note: Please backup the registry key before you delete it. Thanks.
July 9th, 2009 11:59am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics