Re: Removing a DC and then entire domain - help

Tech-Archive recommends: Fix windows errors by optimizing your registry



Inline

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Michael" <admin @ mperrin. co . uk> wrote in message
news:uI2akUqUHHA.3980@xxxxxxxxxxxxxxxxxxxxxxx
Thanks Jorge.
So going by your advice my plan should be:

Transer over all the roles to DC01 from DC02 (How exactly do i tell what
FSMO roles are used - i'm not familiar with that at all - also note no
sites or subnets are defined currently).

from a command prompt
netdom query fsmo

Since there are no sites or subnets defined all default to the default site

Then use dcpromo to demote DC02 so i can use that server for other things.
Then remove it from the domain and delete the HD and install it as a new
server i want (not AD related).
Then when i'm ready to take down DC01 i delete all trusts with this
domain.
Then i use dcpromo and take down this DC01 server.

Sounds good. When re-installing you can specify to delete all partitions.


Will i not get any replication errors or problems or anything if i do
this - i presume it is just gone when i have done this?

The demotion will handle the connection objects so replication will no
longer be available for the old dc.

And am i right in reading that you say i must also delete the two servers
out of my sites and services (even though they are all in default as i
have none defined).

Use Active Directory Sites and Services to remove the domain controller. To
do this, follow these steps: a. Start Active Directory Sites and Services.
b. Expand Sites.
c. Expand the server's site. The default site is
Default-First-Site-Name.
d. Expand Servers.
e. Right-click the domain controller, and then click Delete.


How to demote a dc:
http://support.microsoft.com/kb/238369/EN-US/


Do i need to remove the DC01 and 02 from ADSS before i do dcpromo or
after?

After, do not do before you demote.



I have an article on decommissioning a dc at
http://www.pbbergs.com
Select articles and click on "Decommission a DC"


Thanks for the help - looks like this wont be too complicated or time
consuming.

Michael.




"Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx> wrote in message
news:4A812A2A-4BC7-4E68-8228-00D2A59CE125@xxxxxxxxxxxxxxxx
Hi
The domain has 2 DCs and this domain is part of a forest with trusts to
other domains.
Remove the trusts before dcpromo.

I plan next week on removing one DC (as we need it for something else).
Can i simply run DCpromo on it and unninstall and then use it for
whatever i like afterwards? I presume everything will carry on working
as it should for the domain?
Yes. Do the dcpromo (after removing the trusts), and don't forget to
manually remove the server from ADSS. Also remmember that the server will
autom. become a member ser for the same domain.

Then next i plan on doing DCpromo on the last DC. How easy is this -
just a case of running that? Then how do i ensure nothing is trying to
replicate to them. Do i have to manually delete all the trusts as well
afterwards?
Yes.
Just make sure that all FSMO roles were transferred, you can transfer
them before dcpromo if you want, and that you've at least 1 GC available
per site.
Of course if your dc play more roles in the network like dns or dhcp...
you should transfer those roles as well.

--

I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MCSE

"Michael" <admin @ mperrin. co . uk> wrote in message
news:uQvY6CoUHHA.4872@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

We have a domain we are getting rid of as it serves no purpose. We have
only a few computers left on there and 2 user accounts which we will
migrate before we do this.

The domain has 2 DCs and this domain is part of a forest with trusts to
other domains.


I plan next week on removing one DC (as we need it for something else).
Can i simply run DCpromo on it and unninstall and then use it for
whatever i like afterwards? I presume everything will carry on working
as it should for the domain?

Then next i plan on doing DCpromo on the last DC. How easy is this -
just a case of running that? Then how do i ensure nothing is trying to
replicate to them. Do i have to manually delete all the trusts as well
afterwards?



Any help appreciated. I will be glad to be rid of this domain but don't
want to rush it and cause problems!

Thanks
Michael.








.



Relevant Pages

  • Re: Removing a DC and then entire domain - help
    ... Then remove it from the domain and delete the HD and install it as a new server i want. ... Then when i'm ready to take down DC01 i delete all trusts with this domain. ... Then i use dcpromo and take down this DC01 server. ... Use Active Directory Sites and Services to remove the domain controller. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Will Trust relationships be affected????
    ... As long as you DCPromo the new DC into the domain first then run DCPromo on ... > I want to know what will happen to these trusts when we put the new DC ... > the network and then remove the old server. ...
    (microsoft.public.win2000.networking)
  • Re: removing second DC from forest
    ... Managing the network session with dc1.abcd.local failed. ... When you run Dcpromo on DC2, that action will remove the Domain Controller ... Role from DC2 and DC2 will become a member server of your domain. ...
    (microsoft.public.windows.server.active_directory)
  • Re: dcpromo failed
    ... Turns out a bandwidth accelerator was active during the dcpromo ... MVP - Directory Services ... rights. ... to all services regarding the server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: removing second DC from forest
    ... When you run Dcpromo on DC2, that action will remove the Domain Controller Role from DC2 and DC2 will become a member server of your domain. ... However the server will remain in ADSS, you just need to go to the ADSS and manually remove the server from ADSS, this is done after you run dcpromo on DC2. ... remove the old DC from network, (Ps: ...
    (microsoft.public.windows.server.active_directory)