I wish I had Brian's book. I did go look on his site, after you replied, and I see that adding/removing a 2012 DC should be Domain Admin, and done through Roles/Features, not dcpromo. But didn't see anything about removing 2008R2 DCs. My tech was asking to have his admin account added to Enterprise Admins for this project, and I want to be able to back my telling him No.
From: [email protected] [mailto:[email protected]] On Behalf Of Michael B. Smith Sent: Monday, December 14, 2015 1:43 PM To: [email protected] Subject: [NTSysADM] RE: Credentials needed to add/remove DC from domain What does Brian's book say? :) As I recollect, adding the first DC in a domain (and removing the last DC in a domain) will require enterprise admin. All others should only require domain admin. From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Heaton, Joseph@Wildlife Sent: Monday, December 14, 2015 2:46 PM To: NT System Admin Issues Discussion list Subject: [NTSysADM] Credentials needed to add/remove DC from domain Looking at upgrading our DCs to 2012R2. In order to use DCPromo to demote existing and remove them from AD, and to use DCPromo to promote the new ones, do I need Domain Admin, or Enterprise Admin? I'm seeing contradictory information on the interwebz. Thanks, Joe Heaton
