Error updating the administration application pool credentials stsadm
One of the main reasons for this is because a Domain Controller has no local security groups. Instead, if you are an administrator of the domain controller, by definition you are a Domain Administrator.
Thread Start() "Screw this", I said to myself at this point, "I am better off *demoting* the DC back to a member server, and rerunning the Share Point Configuration Wizard so it can reapply all of the necessary permissions required". Normally on a member server, a Share Point Installation would create three local groups as shown below In a domain controller situation, these local groups are not created because there is no concept of local security accounts. I mentioned earlier that Share Point was running as domain administrator as well as installed onto a DC (talk about a double whammy! My main motivation was to change this back to use low privileged accounts.