How to manually remove AD.

[Hale KPETIGO]

Hello,

I have deleted my active directory database and I have no back up of
it. In fact I would like to remove the active directory completly but I
am unable to do this because:

1. I can not boot completely w2K as it tells me Directory Services
failed to start... and forces me to boot in safe mode for active
directory recovery
2. In the safe mode I can not use dcpromo to remove active directory as
it want me to boot normaly to remove it.

Does any one have any idea of how I can manually remove the active
directory in safe mode in order to become a stand alone server?

Thank you.

HK

--
_______________________________________________________________________
Halé KPETIGO | SeAL - Online Solutions
http://www.seal-france.com | E: (e-mail address removed)
M: +33.(0)6.89.84.31.24 | T: +33.(0)1.46.34.05.05 | F:
+33.(0)1.46.34.13.14

 

[Paul McGuire]

There is a registry change you can make to make it think it is not a DC any
more. I can't find the exact place but maybe someone will post. It is
possible though.

HTH


Paul

 

[M@]

1. I can not boot completely w2K as it tells me Directory Services
failed to start... and forces me to boot in safe mode for active
directory recovery
2. In the safe mode I can not use dcpromo to remove active directory as
it want me to boot normaly to remove it.

Does any one have any idea of how I can manually remove the active
directory in safe mode in order to become a stand alone server?

I think the article you are after may be Q332199. Thankfully I havent yet
had the need to use this doc so I have no idea how useful the information
will be to you. Good luck!

HTH

M@

 

[Jimmy Andersson [MVP]]

If memory serves...
HKLM\System\Current Control Set\Control\Product Options\Product Type\lanman

Change it to servernt

Regards,
/Jimmy

 

[Hale KPETIGO]

I have tried this but unfortunately, it does not work. It tells me I have to
start w2k with AD before using dcpromo.

 

[Hale KPETIGO]

Hello Jimmy,

Thank you for your input. I have recheared this key on microsoft's site
(http://support.microsoft.com/default.aspx?scid=kb;en-us;102987) and do not find
any information relating to your info. Are you sure about this manipulation
being effective?

Thank you.

HK

 

[Jimmy Andersson [MVP]]

Effective... Well, it takes some cleanup on the other DCs, DNS etc
afterwards... I haven't done it in a long time, but I'll see if I can do it
in the lab tomorrow and post the results.

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------

 

[Enkidu]

Does any one have any idea of how I can manually remove the active
directory in safe mode in order to become a stand alone server?

I guess that rebuilding the box from scratch is not an option?

Cheers,

Cliff

 

[Ace Fekay [MVP]]

Effective... Well, it takes some cleanup on the other DCs, DNS etc
afterwards... I haven't done it in a long time, but I'll see if I can do it
in the lab tomorrow and post the results.

Regards,
/Jimmy

Hi Jimmy,

Just to confirm the relevance of that regkey, here's something someone else
put together in the past (forget who) which I changed slightly, but it's
pretty much intact from the original. It mentions that key, and if the steps
are followed (including the services, etc), it will successfully change the
machine to a non DC.

=================================
13 easy steps.
1) On another DC in the domain run NTDSUTIL to move the FSMO's, er seize
them! DOH. (If this is the only DC, then don't worry about it)
2) Make sure DNS is 100% solid on the working DC. (If only one DC, don't
worry about it for now, but configure it correctly before promoting it to a
new DC).
3) Make sure working DC is also a GC. (If just one DC, don't worry about
it).
4) Boot corrupted DC into DSRM, edit the registry change
HKLM\SYSTEM\CCS\Control\ProductOptions change the ProductType value from
LanmanNT to ServerNT. This key dictates if the machine is a DC or jus a
server. ServerNT means it's not a DC.
5)Command prompt > net stop ntfrs to stop FRS.
6) Delete the Winnt\Sysvol and NTDS directories.
7) Reboot the now former DC
8) Log into the now member server. Change it to a stand alone, by joining a
workgroup (My Computer Properties, Network ID tab, remove it from the old
domain).
9) Reboot the now stand alone server.
10) If there is only one DC in the domain, skip this step, otherwise, on the
good DC delete the disabled computer account for the old, now defunct DC.
11) Now on this new stand alone machine, set the Primary DNS Suffix to the
new domain name that you want (In My Computer. Properties, Network ID Tab,
Properties, More,). Reboot.
12. Make sure that DNS is configured with the new domain name and updates
set to YES.
13. Run DCPROMO to create a new domain or join the domain/tree/forest again.
Reboot.
===================================

 

[Tim Parkinson]

Hi,

launch regedit, go to hkey local machine > SYSTEM >
ControlSet001 > Control > ProductOptions and change
ProductType from LanmanNT to ServerNT
Cheers,

Tim.

 

[Jimmy Andersson [MVP]]

Hi Ace,

This was pretty much the same steps I did in the past and was going to do
today. Thanks for saving me time in the lab!

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------


"Ace Fekay [MVP]"

 

[Ace Fekay [MVP]]

Hi Ace,

This was pretty much the same steps I did in the past and was going to do
today. Thanks for saving me time in the lab!

Regards,
/Jimmy
--

There ya go!

Cheers!