I recently had pretty much the same thing happen. I *think* what caused the problem for me was using SCCM OS deployment to build my Server 2008 R2 systems in our production domain, then moving them to our test domain, then DCPROMOing up.
My solution was to build two more Server 2008 R2 systems from SCCM, but I did not have SCCM put them in a domain, I left them workgroup servers. I then DCPROMO'd up. The old DCs had to be DCPROMO /forceremoval. Then, I used "AD Sites and Service" to remove all of the metadata and server objects (YEA! No more ntdsutil mega-typing sessions to clean up metadata!). Finally, I cleaned up DNS and all seems well. From: Graeme Carstairs [mailto:[email protected]] Sent: Thursday, January 27, 2011 12:36 PM To: NT System Admin Issues Subject: 2008 Server Ran DCPROMO into existing domain and it says it completed succesfully but on reboot, NLA, Base filtering etc wont start Hi, I am having some serious issues with a newley promoted 2008 DC. DCPROMO completed succesfully, and then I restarted the server, and from there it all went wrong. The following services wont start giving access denied errors, Base Filering Engine DHCP Client Diagnostic Policy Service Windows Time The following give the Dependency service doesnt exist or has been marked for Deletion. DNS Server File Replication Services IKE and Auth IP Intersite Messaging Kerberos Dependancy Service or Group Failed ot Start IPSEC Policy Agent Windows FIrewall The NLS and NLA services also werent starting but I fixed them but the only way I could get them to start was to give everyon full control to the reg key, but I tried for BFE and that didnt work, and for obvious reason I dont want that to work,. I tried to DCPROMO it down but it would not let me as it was running domain services. any help would be greatly appreciated. thanks Graeme -- Good news everyone, you have just received and e-mail from me! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
