I would have to agree with Rick here, I am positive everything needed to be
an effective Admin isn't taught. In fact I would bet 95% of the admin stuff
I have done over the years isn't taught in any class, even if you took
hundreds of hours of classes. Heck you could probably spend thousands of
hours just covering all of the KB articles. 

I wouldn't ever consider any training to be the end all be all of what can
and should be done. Honestly I have never been a fan of the whole
certification system and training is good for certain things. The folks that
I have run into that are good MCSEs or MCDs were already good before they
took any training or tests. The training is simply, in my mind, just a way
to get a quick spinup on basics on some products or maybe a deepdive in some
specific aspects (this would be training you would get from internal experts
like Dean or Mark Russinovich/David Solomon). 

Consider any professional training you get simply to be the beginning of
your training. Think of it like high school or college or any vocational
training, you learn enough to get you going, not enough to be forever
sufficient. The better the instructor, the better your start. 

   joe


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan
Sent: Friday, May 20, 2005 7:55 PM
To: [email protected]
Subject: RE: [ActiveDir] removing a DC from AD

I'd say this is a discussion much better taken up in the MCT newsgroups.
I'd love to see Paul Adare's reaction to this....

My only comment - When I taught Windows 2000 AD, and now teaching Windows
Server 2003 - every one of my students was taught to remove a failed DC
using NTDSUTIL.  I created the lab that taught this for my students, because
yes - MS does not cover it in the MOC.  

However, that being said - just because it's not in the MOC doesn't mean
it's not of value.  The MOC is the student reference for the instructor to
ADD VALUE TO.  So, if details of NTDSUTIL, or FSMO roles, or replication
inner workings aren't there - it's my job as an instructor to go beyond what
they already have.

That's how *I* teach it.  YMMV.....

Rick Kingslan  MCSE, MCSA, MCT, CISSP
Microsoft MVP:
Windows Server / Directory Services
Windows Server / Rights Management
Windows Security (Affiliate)
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone
WebLog - www.msmvps.com/willhack4food

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Medeiros, Jose
Sent: Friday, May 20, 2005 6:31 PM
To: [email protected]
Cc: [EMAIL PROTECTED]; Jose Medeiros-Gmail (E-mail)
Subject: RE: [ActiveDir] removing a DC from AD

Hi Robert, 

I received most of my training on 2000 server, Active Directory, Clustering
2000 , Exchange 2000 and SQL 2000 from Quickstart Technologies in san
Francisco. 
All in all I have just about 600 hours of MOC training from Quickstart on
2000 server technologies ( Cathy Moya with Microsoft was one of my
instructors at Quickstart and she was also my instructor for TCP/IP for NT
3.51 and Windows 95 at Technowlgy Education centers in San Francisco back in
1996 ) . 

I may be mistaken but in the MOC recovery labs I do not recall any mention
of using NTDSUTIL other then to seize the FSMO roles due to a failed DC
controller that held the FSMO. If Microsoft expects people who take MOC
training at a CTEC to be effective 2000 / 2003 sys admins then such
procedure to remove failed controllers should also be covered in the labs,
and I also see no reason as to why Microsoft does not have a GUI tool yet to
remove such connections effectively.

I'll have to be honest with you I have had no training on AD 2003 and I am
not sure if the 2003 AD class covers this, so if it does,  please accept my
apology for my comment.  ( I did take an Exchange 2003 Class from KenVonberg
a Microsoft MVP and MCT and the MOC for Exchange 2003 did not cover this
either ).

I am not putting down Microsoft only suggesting improvements in it's
flagship product for ease of management.

BTW Technowlogy Education centers was actually spelled Technowlogy not
Technology before they were acquired by Productivity Point. :-)


Sincerely, 

Jose Medeiros
Former Vice President and Postmaster NTEA
MCP+I, MCSE, NT4 MCT
www.ntea.net
www.tvnug.org
www.sfntug.org

------------------------------------------------

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Robert Williams
(RRE)
Sent: Friday, May 20, 2005 3:58 PM
To: [email protected]
Subject: RE: [ActiveDir] removing a DC from AD


What specific MOC Course (s) are you referring to?

Robert Williams, MCSE NT4/2K/2K3, Security+ Infrastructure Rapid Response
Engineer Northeast Region Microsoft Corporation Global Solutions Support
Center 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Medeiros, Jose
Sent: Friday, May 20, 2005 12:32 PM
To: [email protected]
Subject: RE: [ActiveDir] removing a DC from AD

Hi Robert, 

Thank you for pointing that out. I hope that the MOC courseware was also
changed to reflect Microsoft's support recommendations on this subject.

Thanks again, 

Jose Medeiros
www.ntea.net
www.sfntug.org
www.tvnug.org


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Robert Williams
(RRE)
Sent: Friday, May 20, 2005 9:21 AM
To: [email protected]
Subject: RE: [ActiveDir] removing a DC from AD


Also, unless you have a hankering for FRS headaches, you should make sure
that the FRS objects in AD are deleted as well.  The safest way is to use
the methods built in (ntdsutil as per the articles mentioned).

Good Luck!

Robert Williams, MCSE NT4/2K/2K3, Security+ Infrastructure Rapid Response
Engineer Northeast Region Microsoft Corporation Global Solutions Support
Center

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Medeiros, Jose
Sent: Friday, May 20, 2005 11:51 AM
To: [email protected]
Subject: RE: [ActiveDir] removing a DC from AD

Hi Antonio, 

In theory you should just be able to go into sites and services and delete
the server object.

You will also have to delete the existing KCC connections to each DC that
still has a connection to the deleted server and you will have to go into
DNS and delete the SERVER SRV records that point to the old server and
tombstone the Wins entry if your using a Wins server.

Sincerely, 

Jose Medeiros

-------------------------------------------------------------
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Antonio Aranda
Sent: Friday, May 20, 2005 8:31 AM
To: [email protected]
Subject: [ActiveDir] removing a DC from AD


Could anyone tell me how to remove a Domain Controller that does not exit
anymore from AD?  I had three controllers and one had a catastrophic
hardware failure.  So now I need to remove a nonexistent DC from the AD.
Antonio
========================================================================
======
This message is for the sole use of the intended recipient. If you received
this message in error please delete it and notify us. If this message was
misdirected, Credit Suisse, its subsidiaries and affiliates (CS) do not
waive any confidentiality or privilege. CS retains and monitors electronic
communications sent through its network. Instructions transmitted over this
system are not binding on CS until they are confirmed by us. Message
transmission is not guaranteed to be secure. 
========================================================================
======

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to