| Event Id | 29239 |
| Source | lsasrv |
| Description | The server was force demoted. It is no longer a Domain controller. |
| Event Information | The System event log identifies forcibly demoted Windows Server 2003 domain controllers by event ID 29239. For more information click on the Microsoft article give below. |
| Reference Links | Using the DCPROMO /FORCEREMOVAL Command to Force the Demotion of Active Directory Domain Controllers |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.