Remove DC from Active Directory

T

Tass

Hi All,

I have a "test" active directory with a few domain
controllers, one of the controllers has been switched off
and removed from the network but was not demoted first,
the servers name still exists in the active directory. I
believe there is a best practise for removing these
entities, could somebody please point me in the right
direction as to how is the best/cleanest way to remove
this entry. The active directory is a test one but I
wouls still like to do things how they should be done in
the real world

Thanks in advance

Tass
 
J

Jimmy Andersson [MVP]

You need to do a metadata cleanup with NTDSUTIL, you can also use ADSIEdit
from the Win2K Support Tools or Ldp.exe to remove it, they are low-level AD
editors. Don't forget to clean up in Sites and Services, DNS and WINS.

Also see these KB article:
Q216498 - How to remove data in the AD after an unsuccessful DC demotion:
http://support.microsoft.com/support/kb/articles/Q216/4/98.ASP

Deleting Objects from Active Directory Using Ldp.exe:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q244344

Domain Controller Server Object Not Removed After Demotion:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q216364

Error Deleting a Domain Controller Account in Active Directory Users and
Computers:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q247393

Regards,
/Jimmy
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top