Removing Domain Controllers

[Keith]

I have a 2 Domain Controller environment. I installed a
third domain controller and simply got rid of one of the
original domain controllers. All three DC's are still
listed under Active Directory Users and Computers /
Domain Controllers. I can't delete the name of the
server that no longer exists. I get a DSA Object cannot
be deleted message. I've also noticed a tremendous
performance decrease when running anything to do with
Active Directory and get messages about not being able to
authenticate changes and things like that. Any ideas on
how to delete that server and make sure my active
directory is working the way it should? Finally, the
original Windows 2000 servers were upgraded from NTServer
4.0. When I browse the network using Windows XP, the one
server still reads BACKUP DOMAIN CONTROLLER. Why is
that? I thought there was no primary and backup
controllers anymore. Thanks! Keith

 

[Laura E. Hunter \(MVP\)]

You'll need to perform metadata cleanup of Active Directory to remove
references to the removed DC:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;216498

If the removed DC held any FMSO roles, you also need to seize them to
another server also clean up DNS after related records.

http://support.microsoft.com/default.aspx?scid=kb;en-us;255504

 

[ptwilliams]

Unlike NT, in Windows 2000 to get rid of a DC you have to demote it. You do
this by running dcpromo again.

Just a little info. so that you don't have this problem again in the future.


Paul.
________________________