Removing AD off a DC

[Mike]

For various reasons, we have to move AD off one of our
servers. The problem is that dcpromo won't work and I
tried to do the steps in article 216498, but i
continously get access denied errors. This server hasn't
been replicating with other DCs and it is the server that
our only NT4 server (which is running exchange 5.5) gets
it account information from. I need to know how to kill
AD on this DC before more data becomes corrupted by this
computer!!!!!!!!! Any measure to do so is welcome at
this time!!!!!!!!

Need help quickly,
Mike

 

[Paul McGuire]

if you get access denied you may need to check you security policy on the
server. Look at the default domain controller policy and make sure you have
the administrators group in Trust computer/user for delegation.

Then try the demotion again. If this still does not work and you are on SP4
you can use dcpromo /forceremove
and it will remove AD from the server. you will still have the DC in AD
users and computers as a DC. You will need to do a metadata cleanup to get
rid of that.
Some how you need to point the Exchange server to another DC. trying moving
the PDC role to another server and make another server a GC.

HTH

Paul McGuire

 

[Guest]

I'm using the domain admin user and is part of
administrators in trust computer/user. the
dcpromo /forceremove does not work either. Any more
suggestions would be great.

Thank you,
mike

 

[Alan Sterling [MSFT]]

Mike:

When you get to "connect to server <servername>" you need to put the name of
the DC that is working.on not the DC you want to remove.
DCpromo /forceremoval will work if you have SP4 installed on the Windows
2000 machine.

I hope this helps.

Alan Sterling---MCSE
Windows 2000 Directory Services

This posting is provided "AS IS" with no warranties, and confers no rights.
"Use of included script samples are subject to the terms
specified at
http://www.microsoft.com/info/cpyright.htm"