Great to hear that worked.....

Will

-----Original Message-----
From: Paul [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, December 13, 2001 7:19 PM
To: NT 2000 Discussions
Subject: RE: Removing a DC from AD (Final)


RE: Removing a DC from AD (Final)Will,
        That seems to have worked!  Thanks!  So, it seems that the steps
you have to take are as follows:

1) Follow steps in Q216498 to manually remove the NTDS Settings object.
2) Cleanup DNS to remove all references to the server.
3) Remove the SYSVOL share from ADUC - System - File Replication Service
- Domain System Volume (SYSVOL Share)
4) Use ADSIEdit to remove the computer account from Users and Computers.
5) Manually run the KCC to rebuild the replication topology.

Thanks to everyone who gave me suggestions,

Paul Markette
NT Systems Administrator
Epicentric, Inc.
[EMAIL PROTECTED]
415-995-7228


-----Original Message-----
From: Will Pawlikowski [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 13, 2001 8:55 AM
To: NT 2000 Discussions
Subject: RE: Removing a DC from AD


Just a thought....
Have your Tried to Manually Run the KCC and Rebuild the Replication
Topology. Go into the Ad Sites and services..Servers..NTDS
Settings..right click..All Tasks....Check replication topology.  The KCC
should exclude the server if it finds its NTDS settings are not
available it it and is has been 2hrs since the last successful
replication. Will -----Original Message-----
From: Paul Markette [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 12, 2001 5:47 PM
To: NT 2000 Discussions
Subject: RE: Removing a DC from AD


Thanks for the suggestion Will, but I have already cleaned all the
references from Sites and Services.  The only places I find these rogue
objects are the dc objects in Users and Computers, and in Directory
Services Events on the other domain controllers.  The events begin "No
nTDSConnection object exist for inbound replication from server CN="NTDS
Settings ..."" So, the server is gone, but somewhere there is some
remnant of the connection object, which I believe is what is preventing
me from deleting the DC object from ADUC.  Aaaargh! Paul Markette NT
Systems Administrator Epicentric, Inc. [EMAIL PROTECTED]
(415) 995-7228


-----Original Message-----
From: Will Pawlikowski [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 12, 2001 12:34 PM
To: NT 2000 Discussions
Subject: RE: Removing a DC from AD


Have you tried removing this server as a replication partner with other
servers.  Go tin AD Sites and Services, Default-First-Site-Name,
Servers, Server NTDS Settings and the right click to get the properties
of the Replication and remove this server as a Replication partner from
all servers in the Domain. Hope this helps.. Will -----Original
Message-----
From: Paul Markette [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 12, 2001 12:31 PM
To: NT 2000 Discussions
Subject: Removing a DC from AD


Hello All,
        I thought it would be a really smart move to DCPromo a server,
then put it on a physically separate network so that I can have a copy
of the production directory for testing.  The problem is, since I didn't
demote the server before physically moving it, I can't get it out of AD.
I followed Q216498, which describes "How to remove data in the active
directory after an unsuccessful domain controller demotion", but I can't
find anything about how to forcibly demote the DC object.  I used
NTDSUTIL to remove the NTDS Settings object, deleted the server object
in Sites and Services and cleaned up DNS, but I still cannot delete the
DC object in Users and Computers.  I get the error "The DSA object
cannot be deleted."  The only article I can find on Micro$oft's site re:
this message is Q216364, which covers the issue where you cannot delete
the DC object from Sites and Services, which doesn't apply to me.
        The problem is that this is affecting replication.  The other
DC's are trying to replicate with the ghost DC and failing.  Does anyone
have any info on how to completely remove a DC from AD?  I would greatly
appreciate any resources that you could point me to. Thank you, Paul
Markette NT Systems Administrator Epicentric, Inc.
[EMAIL PROTECTED] 415-995-7228


------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]


------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to