dcpromo /forceremoval

[ned]

We upgraded a win nt 4 web server to windows 2000. It had been a domain
controller so dcpromo runs and wants us to setup active directory. We
felt the web server would be more secure as a stand alone machine.

My question is ... would it be OK to run dcpromo /forceremoval without
going through the process of setting up active directory?
Thanks in advance.

 

[ptwilliams]

If you've not run through the dcpromo wizard to start with, there's no need
to demote - and there's especially no need to do a forceful removal.

When you upgrade an NT BDC Windows upgrades itself and then starts the
promotion wizard once the upgrade is complete. Unless you go through with
the wizard, you will not configure a DC.


--

Paul Williams

http://www.msresource.net/
http://forums.msresource.net/

We upgraded a win nt 4 web server to windows 2000. It had been a domain
controller so dcpromo runs and wants us to setup active directory. We
felt the web server would be more secure as a stand alone machine.

My question is ... would it be OK to run dcpromo /forceremoval without
going through the process of setting up active directory?
Thanks in advance.

 

[ned]

If I should not do a forced removal, how to I get the wizard to stop
offering to install active directory, and how do I stop the application
and system errors showing w2k looking for the old domain?

 

[ptwilliams]

Is there a domain in place?

There's nothing to stop you running the wizard and then demoting again. The
options that you take will depend on what's in place already.


What Kind of errors are you seeing with regards to the domain, etc.?
Probably a DNS misconfiguration. Especially for an internal box from NT.
WINS is no longer the primary name resolution mechanism - DNS now is. So
there's some considerations to take with regards to how to configure the
multiple NICs, etc. for a server that'll sit in a DMZ...


--

Paul Williams

http://www.msresource.net/
http://forums.msresource.net/

If I should not do a forced removal, how to I get the wizard to stop
offering to install active directory, and how do I stop the application
and system errors showing w2k looking for the old domain?

 

[ned]

I ran 'net config workstation' on the box in question. The workstation
believes it is in the domain of the old win nt 4 server. That server
was the PDC. It was not mentioned anyplace else. No wins, no dns, no
BDC.

The event log errors I'm getting are as follows. Application event
1202--trust relation failed; system event 5719--no domain controller.

It appears that the workstation is looking for the domain that is no
longer on the server, all on the same box. I need to get the
workstation to forget about the domain.

 

[ptwilliams]

Here's what I'd do:

Let the wizard run - install DNS when asked to and reboot when asked.

Upon reboot, run dcpromo again. After the next reboot, you may want to stop
DNS.

If you want more info. on those errors, start here: www.eventid.net


--

Paul Williams

http://www.msresource.net/
http://forums.msresource.net/

I ran 'net config workstation' on the box in question. The workstation
believes it is in the domain of the old win nt 4 server. That server
was the PDC. It was not mentioned anyplace else. No wins, no dns, no
BDC.

The event log errors I'm getting are as follows. Application event
1202--trust relation failed; system event 5719--no domain controller.

It appears that the workstation is looking for the domain that is no
longer on the server, all on the same box. I need to get the
workstation to forget about the domain.