manually remove DC server from AD

Toggle sidebar Toggle sidebar
B

Brian

Distinguished
Sep 9, 2003
1,371
0
19,280
Archived from groups: microsoft.public.win2000.active_directory (More info?)

Had a DC server removed, didn't do dcpromo on it (didn't know that then).
How can I remove it from AD and the domain/forest? It it no longer in the
forest. Thanks
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

"Brian" <Brian@discussions.microsoft.com> wrote in message
news:9930E49C-7D5E-4B94-BBA9-6F6F970BF7B0@microsoft.com...
> Had a DC server removed, didn't do dcpromo on it (didn't know that then).
> How can I remove it from AD and the domain/forest? It it no longer in the
> forest. Thanks

NTDS metadata cleanup

Search Google for:

[ NTDS "metadata cleanup" remove DC Domain ]

No need to add either site:microsoft.com OR microsoft:
since the NTDS and other terms make it Microsoft specific
by itself.

Unless you WISH to restrict answers to the site:microsoft.com
for some reason.

[ NTDS "metadata cleanup" remove DC Domain site:microsoft.com ]

Key points to NOTE when doing the metadata cleanup:

You CONNECT to a WORKING DC.
You SELECT the missing/dead DC or DOMAIN

'Connect' and 'Select' are technical terms in this context.

--
Herb Martin
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

Try This
http://support.microsoft.com/?scid=kb;en-us;216498
--
Yor Suiris
Remove the kNOT to reply.
But it is best to share it with the group.


"Brian" <Brian@discussions.microsoft.com> wrote in message
news:9930E49C-7D5E-4B94-BBA9-6F6F970BF7B0@microsoft.com...
> Had a DC server removed, didn't do dcpromo on it (didn't know that then).
> How can I remove it from AD and the domain/forest? It it no longer in the
> forest. Thanks
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

Brian,

As the two others ( Howdy, guys! ) have mentioned, you need to do a MetaData
Cleanup. This is necessary because the Domain Controller in question was
not properly removed. Although it is physically missing, AD thinks ( well,
to a point ) that it is still there. If you do a repadmin /showreps you
will notice that there are objects to / from this DC with a DEL: before it.
So, you will have a lot of replication related errors. Amongst others!

Follow the link that Yor gave you. And, as Herb mentioned, you will need to
connect to an existing Domain Controller when using ntdsutil and then select
the Domain Controller that was incorrectly removed. This is a common error
that people make. They try to connect - or bind - to the Domain Controller
that they are trying to remove. You will get an error a few steps later.
Although it is clearly stated in the MSKB Article I guess that most people
overlook this.

--
Cary W. Shultz
Roanoke, VA 24014
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com



"Brian" <Brian@discussions.microsoft.com> wrote in message
news:9930E49C-7D5E-4B94-BBA9-6F6F970BF7B0@microsoft.com...
> Had a DC server removed, didn't do dcpromo on it (didn't know that then).
> How can I remove it from AD and the domain/forest? It it no longer in the
> forest. Thanks
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

> that people make. They try to connect - or bind - to the Domain
Controller
> that they are trying to remove. You will get an error a few steps later.
> Although it is clearly stated in the MSKB Article I guess that most people
> overlook this.

The problem is the linguistic (both sound and meaning)
between Select and Connect -- when a newcomer to
NTDSUtil is reading the docs for the first time it isn't
clear that that small linguistic difference is KEY.

Thus sentences like this make perfect sense:
"I selected the first DC in the domain with AD Users/Computers
to do the update." "So I connected to it."

But. as you say, if you try to Connect to a dead DC
it is very disappointing.

--
Herb Martin


"Cary Shultz [A.D. MVP]" <cwshultz@mvps.org> wrote in message
news:eqHPDtYBFHA.3708@TK2MSFTNGP14.phx.gbl...
> Brian,
>
> As the two others ( Howdy, guys! ) have mentioned, you need to do a
MetaData
> Cleanup. This is necessary because the Domain Controller in question was
> not properly removed. Although it is physically missing, AD thinks (
well,
> to a point ) that it is still there. If you do a repadmin /showreps you
> will notice that there are objects to / from this DC with a DEL: before
it.
> So, you will have a lot of replication related errors. Amongst others!
>
> Follow the link that Yor gave you. And, as Herb mentioned, you will need
to
> connect to an existing Domain Controller when using ntdsutil and then
select
> the Domain Controller that was incorrectly removed. This is a common
error
> that people make. They try to connect - or bind - to the Domain
Controller
> that they are trying to remove. You will get an error a few steps later.
> Although it is clearly stated in the MSKB Article I guess that most people
> overlook this.
>
> --
> Cary W. Shultz
> Roanoke, VA 24014
> Microsoft Active Directory MVP
>
> http://www.activedirectory-win2000.com
> http://www.grouppolicy-win2000.com
>
>
>
> "Brian" <Brian@discussions.microsoft.com> wrote in message
> news:9930E49C-7D5E-4B94-BBA9-6F6F970BF7B0@microsoft.com...
> > Had a DC server removed, didn't do dcpromo on it (didn't know that
then).
> > How can I remove it from AD and the domain/forest? It it no longer in
the
> > forest. Thanks
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

Point well taken, Herb.

--
Cary W. Shultz
Roanoke, VA 24014
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com



"Herb Martin" <news@LearnQuick.com> wrote in message
news:%230KudVZBFHA.2584@TK2MSFTNGP09.phx.gbl...
>> that people make. They try to connect - or bind - to the Domain
> Controller
>> that they are trying to remove. You will get an error a few steps later.
>> Although it is clearly stated in the MSKB Article I guess that most
>> people
>> overlook this.
>
> The problem is the linguistic (both sound and meaning)
> between Select and Connect -- when a newcomer to
> NTDSUtil is reading the docs for the first time it isn't
> clear that that small linguistic difference is KEY.
>
> Thus sentences like this make perfect sense:
> "I selected the first DC in the domain with AD Users/Computers
> to do the update." "So I connected to it."
>
> But. as you say, if you try to Connect to a dead DC
> it is very disappointing.
>
> --
> Herb Martin
>
>
> "Cary Shultz [A.D. MVP]" <cwshultz@mvps.org> wrote in message
> news:eqHPDtYBFHA.3708@TK2MSFTNGP14.phx.gbl...
>> Brian,
>>
>> As the two others ( Howdy, guys! ) have mentioned, you need to do a
> MetaData
>> Cleanup. This is necessary because the Domain Controller in question was
>> not properly removed. Although it is physically missing, AD thinks (
> well,
>> to a point ) that it is still there. If you do a repadmin /showreps you
>> will notice that there are objects to / from this DC with a DEL: before
> it.
>> So, you will have a lot of replication related errors. Amongst others!
>>
>> Follow the link that Yor gave you. And, as Herb mentioned, you will need
> to
>> connect to an existing Domain Controller when using ntdsutil and then
> select
>> the Domain Controller that was incorrectly removed. This is a common
> error
>> that people make. They try to connect - or bind - to the Domain
> Controller
>> that they are trying to remove. You will get an error a few steps later.
>> Although it is clearly stated in the MSKB Article I guess that most
>> people
>> overlook this.
>>
>> --
>> Cary W. Shultz
>> Roanoke, VA 24014
>> Microsoft Active Directory MVP
>>
>> http://www.activedirectory-win2000.com
>> http://www.grouppolicy-win2000.com
>>
>>
>>
>> "Brian" <Brian@discussions.microsoft.com> wrote in message
>> news:9930E49C-7D5E-4B94-BBA9-6F6F970BF7B0@microsoft.com...
>> > Had a DC server removed, didn't do dcpromo on it (didn't know that
> then).
>> > How can I remove it from AD and the domain/forest? It it no longer in
> the
>> > forest. Thanks
>>
>>
>
>
 
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom