Win2k3 still asks for DC's password

Microsoft Microsoft windows 2003 server...
February 13, 2010 at 05:48:59
Specs: Windows Server 2003 fully patched
Hi again,

I successfully retired a Win2k3 server and some WinXPs from the actual domain; created some new accounts but can't access shared folders unless I type a user valid for the domain controller. I suppose the Win2k3 still asks the DC for accounts authentication.

BTW, we're still using DC's DNS service.

Is it a policy adjustment problem. What else should I look for before taking down DCs to ensure everybody will be able to work with new accounts?

TIA, Roberto.


See More: Win2k3 still asks for DCs password

Report •

#1
February 13, 2010 at 07:33:13
HOW did you "retire" this server?

Its unclear, was this server just a member of the domain or a dc?

What is the server a member of now?
These new accounts, do they exist on this server?


Report •

#2
February 13, 2010 at 08:17:54
Right! sorry...

We have a domain with 2 DCs. I want to "downgrade" the network to work as a workgroup. I setup a new Win2k3 server and made it a member of the actual domain.

Now, how do I downgrade it?

I began downgrading the new Win2k3 and some XP clients. But for some reason it seems Win2k3 is still asking DCs for authentication and not using the new local user accounts.

What am I missing? TIA, Roberto.


Report •

#3
February 13, 2010 at 08:26:18
How many pcs do you have total?

Usually you don't go from forest/domain to a workgroup since you give up central management and security.

HOW did you "downgrade" specifically?


Report •

Related Solutions

#4
February 13, 2010 at 09:10:26
There are 14 computers, all WinXP.

Steps followed:
- Joined Win2003 to domain managed by an old Win2000 server DC.
- Copied some big folders and other tasks.
- Detached Win2003 from domain. DC still running with 14 computers
- Created some local accounts.
- Detached 4 computers from domain, rebooted, created same accounts that in Win2003. Tried to login to Win2003 but refuses the new accounts, but Domain Admin accounts works!!! Why!?!? Why is Win2003 still asking DC? Or are the WinXPs who still have some policy about the domain?

DCs still working for the other machines.


Report •

#5
February 13, 2010 at 15:21:51
Words like 'detached' and 'joined' aren't anwering my question.
I ask you HOW you did it and you tell me WHAT you did. Not the same thing.

How did you detach the pcs from the domain? step by step
How did you detach the member server from the domain? same


Report •

#6
February 13, 2010 at 15:59:13
Ok, sorry again.

I didn't make the changes, but the person how did them tells me he went to "system properties" / computer's name tab, clicked the change button and changed the option from domain member to workgroup member. I'm translating these names on the fly because we're using a spanish version, hope you'll have a clear idea of what I'm describing.

After that he also changed the workgroup to a different name than the domain.

Then he restarted the ex-server member server and did the same thing with WinXPs.

As far as I understand the consequences are that those computers aren't registered in DNS nither Active Directory of the DC. And for your previous questions I suppose we did it the wrong way, so I'm searching for instructions on how to remove a member server and computer from a domain... thanx a lot for your time and good will :-)


Report •

#7
February 13, 2010 at 18:20:46
Thanks. This is what I needed to hear.

This was done correctly. Server is in a workgroup. 4 xp pcs are in the same workgroup.

Review the 2003 server users and share folder assignments.

Only cleanup that most likely was not done was was deleting the server and xp entries from the DC's DNS server and active directory.

You say you copied the dc shared folders. This tells me those shares still exist. Make the share names on the 2003 server different so you can distinguish between the two.


Report •

Ask Question