DC in Child Domain Died

I have a child domain in which I had two DCs - A and B. B died in that
it boots but has no network connectivity so you can't log in except in
Recovery mode so it's not possible to demote the server.

The forest is all 2003R2 DCs at the 2003 functional level. Today I
added a third DC, call it C, to this child domain and it's working fine.
DC A has the roles according to a check with AD Users and Computers
for that domain.

I want to get rid of computer B entirely. According to the 2003 Server
handbooks (the ones to prep you for the exam) I can delete DC B from the
domain as a controller just by going to AD Sites, right clicking and
selecting delete but that seems too easy!

What do I have to do in order to remove DC B from it's role as a DC?
Once demoted I'll just shut it down and remove it.

Thanks.

Howdie!

Am 12.05.2010 23:47, schrieb Brett Holcomb:
> I want to get rid of computer B entirely. According to the 2003 Server
> handbooks (the ones to prep you for the exam) I can delete DC B from the
> domain as a controller just by going to AD Sites, right clicking and
> selecting delete but that seems too easy!

Yeah, that is not all you need to do. If you'll never bring the machine
online again, you need to clean up its references off the database and
the directory. You do that in a metadata cleanup:
http://support.microsoft.com/kb/216498

After that, wipe it from AD Sites & Services (this isn't done
automatically) and check whether there are still references in DNS
(there are, if aging&scavenging is not configured).

Cheers,
Florian

I have a blog on this at:
http://blogs.dirteam.com/controlpane...69&postid=3999

--
Paul Bergson
MVP - Directory Services
MCITP - Enterprise Administrator
MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
2008, Vista, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewGroups. This
posting is provided "AS IS" with no warranties and confers no rights.
"Brett Holcomb" <> wrote in message
news:%...
>I have a child domain in which I had two DCs - A and B. B died in that it
>boots but has no network connectivity so you can't log in except in
>Recovery mode so it's not possible to demote the server.
>
> The forest is all 2003R2 DCs at the 2003 functional level. Today I added
> a third DC, call it C, to this child domain and it's working fine. DC A
> has the roles according to a check with AD Users and Computers for that
> domain.
>
> I want to get rid of computer B entirely. According to the 2003 Server
> handbooks (the ones to prep you for the exam) I can delete DC B from the
> domain as a controller just by going to AD Sites, right clicking and
> selecting delete but that seems too easy!
>
> What do I have to do in order to remove DC B from it's role as a DC? Once
> demoted I'll just shut it down and remove it.
>
> Thanks.

Thank you. I had read bout the metadata cleanup and see it in ndsutil
but wondered if in this situation it was neccessary. I will read the KB
article and clean up.



On 5/13/2010 1:57 AM, Florian Frommherz [MVP] wrote:
> Howdie!
>
> Am 12.05.2010 23:47, schrieb Brett Holcomb:
>> I want to get rid of computer B entirely. According to the 2003 Server
>> handbooks (the ones to prep you for the exam) I can delete DC B from the
>> domain as a controller just by going to AD Sites, right clicking and
>> selecting delete but that seems too easy!
>
> Yeah, that is not all you need to do. If you'll never bring the machine
> online again, you need to clean up its references off the database and
> the directory. You do that in a metadata cleanup:
> http://support.microsoft.com/kb/216498
>
> After that, wipe it from AD Sites & Services (this isn't done
> automatically) and check whether there are still references in DNS
> (there are, if aging&scavenging is not configured).
>
> Cheers,
> Florian

Thank you. I'll go read it.



On 5/13/2010 8:19 AM, Paul Bergson [MVP-DS] wrote:
> I have a blog on this at:
> http://blogs.dirteam.com/controlpane...69&postid=3999
>

I gave you a bad link, try this:
http://blogs.dirteam.com/blogs/paulb...ion-i-see.aspx

--
Paul Bergson
MVP - Directory Services
MCITP - Enterprise Administrator
MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
2008, Vista, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewGroups. This
posting is provided "AS IS" with no warranties and confers no rights.
"Paul Bergson [MVP-DS]" <> wrote in message
news:...
>I have a blog on this at:
> http://blogs.dirteam.com/controlpane...69&postid=3999
>
> --
> Paul Bergson
> MVP - Directory Services
> MCITP - Enterprise Administrator
> MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
> 2008, Vista, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewGroups. This
> posting is provided "AS IS" with no warranties and confers no rights.
> "Brett Holcomb" <> wrote in message
> news:%...
>>I have a child domain in which I had two DCs - A and B. B died in that it
>>boots but has no network connectivity so you can't log in except in
>>Recovery mode so it's not possible to demote the server.
>>
>> The forest is all 2003R2 DCs at the 2003 functional level. Today I added
>> a third DC, call it C, to this child domain and it's working fine. DC A
>> has the roles according to a check with AD Users and Computers for that
>> domain.
>>
>> I want to get rid of computer B entirely. According to the 2003 Server
>> handbooks (the ones to prep you for the exam) I can delete DC B from the
>> domain as a controller just by going to AD Sites, right clicking and
>> selecting delete but that seems too easy!
>>
>> What do I have to do in order to remove DC B from it's role as a DC? Once
>> demoted I'll just shut it down and remove it.
>>
>> Thanks.
>
>

Thanks. It was very interesting reading.

On 5/14/2010 8:09 AM, Paul Bergson [MVP-DS] wrote:
> I gave you a bad link, try this:
> http://blogs.dirteam.com/blogs/paulb...ion-i-see.aspx
>