A
Aaron
I have a 2000 server with all of the latest SP and patches installed. It
is also running Exchange 5.5.
I need to rebuild this machine, but it participates in active directory
as a DC.
I would like to properly remove this machine from active directory, and
in the course of this, I have attempted to run dcpromo and demote this
server. When I run this utility, I am informed that certificate services
are installed and will need to be removed before dcpromo can run. When I
attempt to remove certificate service, I find that it is not installed.
Whe I attempt to install the service (so I can uninstall it) I get an
error message, "Access Denied" (I am logged into the server as a domain
admin) and the service does not install or run.
I am not at all concerned about this machines OS, as it will be
reinstalled.
I am concerned about the state of AD, though.
What is the best way to proceed with removing this machine from AD?
I have been reading Q255504- Using Ntdsutil.exe to Seize or Transfer FSMO
Roles to a Domain Controller.
This article indicates that you should not put the Infrastructure Master
role on the same domain controller as the global catalog.
The only other server acting as a DC is also holding the global catalog.
We have no additional Domain Controllers, so I am unsure if I should
proceed with the steps outlined in this Q article.
What should I do?
One other quick question for those of you that are familiar with Exchange
5.5: Should I remove this exchange server from the site before or after
removing the machine from AD? I will be following Q152959 to remove this
(first) server from the exchange site.
Thanks for your time and I look forward to your response.
Aaron
is also running Exchange 5.5.
I need to rebuild this machine, but it participates in active directory
as a DC.
I would like to properly remove this machine from active directory, and
in the course of this, I have attempted to run dcpromo and demote this
server. When I run this utility, I am informed that certificate services
are installed and will need to be removed before dcpromo can run. When I
attempt to remove certificate service, I find that it is not installed.
Whe I attempt to install the service (so I can uninstall it) I get an
error message, "Access Denied" (I am logged into the server as a domain
admin) and the service does not install or run.
I am not at all concerned about this machines OS, as it will be
reinstalled.
I am concerned about the state of AD, though.
What is the best way to proceed with removing this machine from AD?
I have been reading Q255504- Using Ntdsutil.exe to Seize or Transfer FSMO
Roles to a Domain Controller.
This article indicates that you should not put the Infrastructure Master
role on the same domain controller as the global catalog.
The only other server acting as a DC is also holding the global catalog.
We have no additional Domain Controllers, so I am unsure if I should
proceed with the steps outlined in this Q article.
What should I do?
One other quick question for those of you that are familiar with Exchange
5.5: Should I remove this exchange server from the site before or after
removing the machine from AD? I will be following Q152959 to remove this
(first) server from the exchange site.
Thanks for your time and I look forward to your response.
Aaron