Step-By-Step: Manually Removing A Domain Controller Server

Published Oct 31 2018 10:03 PM 333K Views
Microsoft

Use of DCPROMO is still the proper way to remove a DC server in an Active Directory infrastructure. Certain situations, such as server crash or failure of the DCPROMO option, require manual removal of the DC from the system by cleaning up the server's metadata. The following detailed steps will help you accomplish this:

Step 1: Removing metadata via Active Directory Users and Computers

  1. Log in to DC server as Domain/Enterprise administrator and navigate to Server Manager > Tools > Active Directory Users and Computers
     
  2. Expand the Domain > Domain Controllers 

    meta1 
  3. Right click on the Domain Controller you need to manually remove and click Delete
     
    Manually-Removing-A-Domain-Controller-Windows-Server-2.png

     

     

  4. Click Yes to confirm within the Active Directory Domain Services dialog box
     
    Manually-Removing-A-Domain-Controller-Windows-Server-3.png

     

  5. In next dialog box, select This Domain Controller is permanently offline and can no longer be demoted using the Active Directory Domain Services Installation Wizard (DCPROMO) and click Delete 
     
    Manually-Removing-A-Domain-Controller-Windows-Server-4.png

     

     

  6. If the domain controller is global catalog server, in next window click Yes to continue with deletion
     
  7. If the domain controller holds any FSMO roles in next window, click Ok to move them to the domain controller which is available

Step 2: Removing the DC server instance from the Active Directory Sites and Services

  1. Go to Server manager > Tools > Active Directory Sites and Services
     
  2. Expand the Sites and go to the server which need to remove
     
  3. Right click on the server you which to remove and click Delete 
     
    Manually-Removing-A-Domain-Controller-Windows-Server-5.png

     

     

  4. Click Yes to confirm

    Manually-Removing-A-Domain-Controller-Windows-Server-6.png

     

Step 3: Remove metadata via ntdsutil 

  1. Right Click on Start > Command Prompt (admin)
     
  2. Type ntdsutil and enter 
     
    Manually-Removing-A-Domain-Controller-Windows-Server-7.png

     

  3. You are then presented with the metadata cleanup prompt
     meta8
     

  4. Next type remove selected server <servername>
    NOTE: Replace <servername> with domain Controller server you wish to remove
     
    Manually-Removing-A-Domain-Controller-Windows-Server-9.png

     

  5. Click Yes to proceed when presented with the warning window 

     

  6. Execute the quit command twice to exit out of the console

NOTE: This post was originally posted on CANITPRO.NET and was co-authored by Microsoft MVP Dishan Francis

 

The following video provides examples of other ways to monitor on-premises and in cloud servers:

 

 

 

8 Comments
%3CLINGO-SUB%20id%3D%22lingo-sub-320902%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Manually%20Removing%20A%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-320902%22%20slang%3D%22en-US%22%3E%3CP%3ECurious%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F268472%22%20target%3D%22_blank%22%3E%40Engineer80%3C%2FA%3E.%20What%20version%20of%20server%20are%20you%20attempting%20to%20remove%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-320897%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Manually%20Removing%20A%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-320897%22%20slang%3D%22en-US%22%3E%3CP%3EGood%20day%2C%3C%2FP%3E%3CP%3EThe%20steps%20to%20perform%20the%20deletion%20of%20a%20server%20were%20followed%20to%20the%20letter%20and%20did%20not%20work.%3CBR%20%2F%3EIt%20must%20have%20started%20from%20step%202%2C%20Sites%20and%20services%20of%20the%20active%20directory%2C%20unprotecting%20the%20connections%20to%20the%20other%20servers%2C%20then%20unprotecting%20the%20server%20and%20finally%20eliminating%20the%20server%2C%20being%20automatically%20removed%20from%20Users%20and%20computers%20in%20the%20active%20directory.%3CBR%20%2F%3EAnd%20then%20you%20go%20to%20step%203%20with%20the%20ndsutil%20command%20and%20you%20do%20not%20see%20it%20anymore%2C%20so%20it%20does%20not%20do%20anything.%3CBR%20%2F%3ETherefore%2C%20I%20request%20that%20this%20manual%20be%20rectified.%3C%2FP%3E%3CP%3EThank%20you%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-614163%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Manually%20Removing%20A%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-614163%22%20slang%3D%22en-US%22%3E%3CP%3EStep%20three%20was%20not%20required%20for%20me%2C%20either.%20The%20DCs%20I%20was%20removing%20were%202008%20R2%2C%20and%20I%20was%20removing%20them%20via%20a%202012%20DC.%20I%20got%20the%20error%3A%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%3E(The%20object%20name%20has%20bad%20syntax.)%26nbsp%3BUnable%20to%20determine%20the%20domain%20hosted%20by%20the%20Active%20Directory%20Domain%20Controller%20(5).%20Please%20use%20the%20connection%20menu%20to%20specify%20it.%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CP%3ERegardless%2C%20it%20seems%20to%20have%20all%20been%20successful%20as%20far%20as%20I%20can%20tell%20(is%20there%20a%20way%20to%20verify%20metadata%20was%20successfully%20removed%3F).%26nbsp%3B%20I%20followed%20the%20steps%20and%20the%20removed%20DCs%20were%20not%20in%20the%20list%20when%20I%20executed%20%22list%20servers%20in%20site%22%20so%20I%20think%20it's%20fine.%20I%20subsequently%20ran%20the%20AD%20Replication%20Status%20Tool%20and%20the%20servers%20were%20also%20nowhere%20to%20be%20found.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-280564%22%20slang%3D%22en-US%22%3EStep-By-Step%3A%20Manually%20Removing%20A%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-280564%22%20slang%3D%22en-US%22%3E%3CP%3EUse%20of%20DCPROMO%20is%20still%20the%20proper%20way%20to%20remove%20a%20DC%20server%20in%20an%20Active%20Directory%20infrastructure.%20The%20following%20video%20provides%20an%20example%20of%20these%20steps%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CIFRAME%20src%3D%22https%3A%2F%2Faka.ms%2Fws2012r2ad2%22%20width%3D%22640%22%20height%3D%22360%22%20frameborder%3D%220%22%3E%3C%2FIFRAME%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECertain%20situations%2C%20such%20as%20server%20crash%20or%20failure%20of%20the%20DCPROMO%20option%2C%20require%20manual%20removal%20of%20the%20DC%20from%20the%20system%20by%20cleaning%20up%20the%20servers%20metadata.%20The%20following%20detailed%20steps%20will%20help%20you%20accomplish%20this%3A%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-1901156321%22%20id%3D%22toc-hId-1901156321%22%20id%3D%22toc-hId-1901156321%22%20id%3D%22toc-hId-1901156321%22%20id%3D%22toc-hId-1901156321%22%20id%3D%22toc-hId-1901156321%22%20id%3D%22toc-hId-1901156321%22%20id%3D%22toc-hId-1901156321%22%20id%3D%22toc-hId-1901156321%22%20id%3D%22toc-hId-1901156321%22%20id%3D%22toc-hId-1901156321%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%20medium%3B%22%3EStep%201%3A%26nbsp%3BRemoving%20metadata%20via%20Active%20Directory%20Users%20and%20Computers%3C%2FSPAN%3E%20%3C%2FSTRONG%3E%3C%2FH1%3E%0A%3COL%3E%0A%3CLI%3ELog%20in%20to%20DC%20server%20as%20Domain%2FEnterprise%20administrator%20and%20navigate%20to%20%3CSTRONG%3EServer%20Manager%20%26gt%3B%20Tools%20%26gt%3B%20Active%20Directory%20Users%20and%20Computers%3C%2FSTRONG%3E%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3E%3C%2FLI%3E%0A%3CLI%3EExpand%20the%20%3CSTRONG%3EDomain%20%26gt%3B%20Domain%20Controllers%3C%2FSTRONG%3E%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22http%3A%2F%2Fwww.rebeladmin.com%2Fwp-content%2Fuploads%2F2016%2F01%2Fmeta1.png%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3E%3CIMG%20class%3D%22alignnone%20size-full%20wp-image-1701%22%20src%3D%22http%3A%2F%2Fwww.rebeladmin.com%2Fwp-content%2Fuploads%2F2016%2F01%2Fmeta1.png%22%20border%3D%220%22%20alt%3D%22meta1%22%20width%3D%22658%22%20height%3D%22288%22%20%2F%3E%3C%2FA%3E%26nbsp%3B%3C%2FLI%3E%0A%3CLI%20style%3D%22text-align%3A%20left%3B%22%3ERight%20click%20on%20the%26nbsp%3BDomain%20Controller%20you%20need%20to%20manually%20remove%20and%20click%20%3CSTRONG%3ED%3C%2FSTRONG%3E%3CSTRONG%3E%3CSTRONG%3Eelete%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20503px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F58795i4F97EA6E54386773%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-2.png%22%20title%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-2.png%22%20%2F%3E%3C%2FSPAN%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3EClick%20%3CSTRONG%3EYes%3C%2FSTRONG%3E%20to%20confirm%20within%20the%20Active%20Directory%20Domain%20Services%20dialog%20box%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20564px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F58796i8F50A3456B14F82F%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-3.png%22%20title%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-3.png%22%20%2F%3E%3C%2FSPAN%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3EIn%20next%20dialog%20box%2C%20select%20%3CSTRONG%3EThis%20Domain%20Controller%20is%20permanently%20offline%20and%20can%20no%20longer%20be%20demoted%20using%20the%20Active%20Directory%20Domain%20Services%20Installation%20Wizard%20(DCPROMO)%3C%2FSTRONG%3E%20and%20click%20%3CSTRONG%3E%3CSTRONG%3EDelete%3C%2FSTRONG%3E%3C%2FSTRONG%3E%26nbsp%3B%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20562px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F58797iE22F9E3C045E3531%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-4.png%22%20title%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-4.png%22%20%2F%3E%3C%2FSPAN%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3EIf%20the%20domain%20controller%20is%20global%20catalog%20server%2C%20in%20next%20window%20click%20%3CSTRONG%3EYes%3C%2FSTRONG%3E%20to%20continue%20with%20deletion%3CBR%20%2F%3E%26nbsp%3B%3C%2FLI%3E%0A%3CLI%3EIf%20the%20domain%20controller%20holds%20any%20FSMO%20roles%20in%20next%20window%2C%20click%20%3CSTRONG%3EOk%20%3C%2FSTRONG%3Eto%20move%20them%20to%20the%20domain%20controller%20which%20is%20available%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CH1%20id%3D%22toc-hId--651000640%22%20id%3D%22toc-hId--651000640%22%20id%3D%22toc-hId--651000640%22%20id%3D%22toc-hId--651000640%22%20id%3D%22toc-hId--651000640%22%20id%3D%22toc-hId--651000640%22%20id%3D%22toc-hId--651000640%22%20id%3D%22toc-hId--651000640%22%20id%3D%22toc-hId--651000640%22%20id%3D%22toc-hId--651000640%22%20id%3D%22toc-hId--651000640%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%20medium%3B%22%3EStep%202%3A%26nbsp%3BRemoving%20the%20DC%20server%20instance%20from%20the%20Active%20Directory%20Sites%20and%20Services%3C%2FSPAN%3E%20%3C%2FSTRONG%3E%3C%2FH1%3E%0A%3COL%3E%0A%3CLI%3EGo%20to%20%3CSTRONG%3EServer%20manager%20%26gt%3B%20Tools%20%26gt%3B%20Active%20Directory%20Sites%20and%20Services%3C%2FSTRONG%3E%20%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3E%3C%2FLI%3E%0A%3CLI%3EExpand%20the%20Sites%20and%20go%20to%20the%20server%20which%20need%20to%20remove%3CBR%20%2F%3E%26nbsp%3B%3C%2FLI%3E%0A%3CLI%3ERight%20click%20on%20the%20server%20you%20which%20to%20remove%20and%20click%20%3CSTRONG%3E%3CSTRONG%3EDelete%3C%2FSTRONG%3E%3C%2FSTRONG%3E%26nbsp%3B%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20546px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F58798i2E502DC00CAB07D9%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-5.png%22%20title%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-5.png%22%20%2F%3E%3C%2FSPAN%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3EClick%20%3CSTRONG%3EYes%3C%2FSTRONG%3E%20to%20confirm%20%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20432px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F58799i231E5FA5B874BC6B%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-6.png%22%20title%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-6.png%22%20%2F%3E%3C%2FSPAN%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CH1%20id%3D%22toc-hId-1091809695%22%20id%3D%22toc-hId-1091809695%22%20id%3D%22toc-hId-1091809695%22%20id%3D%22toc-hId-1091809695%22%20id%3D%22toc-hId-1091809695%22%20id%3D%22toc-hId-1091809695%22%20id%3D%22toc-hId-1091809695%22%20id%3D%22toc-hId-1091809695%22%20id%3D%22toc-hId-1091809695%22%20id%3D%22toc-hId-1091809695%22%20id%3D%22toc-hId-1091809695%22%3E%3CSPAN%20style%3D%22font-size%3A%20medium%3B%22%3E%3CSTRONG%3EStep%203%3A%26nbsp%3BRemove%20metadata%20via%20ntdsutil%26nbsp%3B%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FH1%3E%0A%3COL%3E%0A%3CLI%3ERight%20Click%20on%20Start%20%26gt%3B%20Command%20Prompt%20(admin)%3CBR%20%2F%3E%26nbsp%3B%3C%2FLI%3E%0A%3CLI%3EType%3CSTRONG%3E%20ntdsutil%3C%2FSTRONG%3E%20and%20enter%26nbsp%3B%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20677px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F58800iC8BD362A1AFC3DC7%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-7.png%22%20title%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-7.png%22%20%2F%3E%3C%2FSPAN%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3E%3CP%3EYou%20are%20then%20presented%20with%20the%20%3CSTRONG%3Emetadata%20cleanup%20%3C%2FSTRONG%3Eprompt%3CBR%20%2F%3E%26nbsp%3B%3CA%20href%3D%22http%3A%2F%2Fwww.rebeladmin.com%2Fwp-content%2Fuploads%2F2016%2F01%2Fmeta8.png%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3E%3CIMG%20class%3D%22alignnone%20size-full%20wp-image-1708%22%20src%3D%22http%3A%2F%2Fwww.rebeladmin.com%2Fwp-content%2Fuploads%2F2016%2F01%2Fmeta8.png%22%20border%3D%220%22%20alt%3D%22meta8%22%20width%3D%22679%22%20height%3D%22208%22%20%2F%3E%3C%2FA%3E%3CBR%20%2F%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3ENext%20type%20%3CSTRONG%3Eremove%20selected%20server%20%3CSERVERNAME%3E%3C%2FSERVERNAME%3E%3C%2FSTRONG%3E%20%3CBR%20%2F%3E%3CSTRONG%3ENOTE%3A%3C%2FSTRONG%3E%20Replace%20%3CSERVERNAME%3E%20with%20domain%20Controller%20server%20you%20wish%20to%20remove%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20675px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F58804i8AA8F1248028C58C%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-9.png%22%20title%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-9.png%22%20%2F%3E%3C%2FSPAN%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FSERVERNAME%3E%3C%2FLI%3E%0A%3CLI%3EClick%20%3CSTRONG%3EYes%3C%2FSTRONG%3E%20to%20proceed%20when%20presented%20with%20the%20warning%20window%26nbsp%3B%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3C%2FLI%3E%0A%3CLI%3E%3CP%3EExecute%20the%20%3CSTRONG%3Equit%3C%2FSTRONG%3E%20command%20twice%20to%20exit%20out%20of%20the%20console%3C%2FP%3E%0A%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%20style%3D%22padding%3A%200%3B%20margin%3A%200%3B%22%3E%3CSTRONG%3ENOTE%3A%3C%2FSTRONG%3E%20This%20post%20was%20originally%20posted%20on%20CANITPRO.NET%20and%20was%20co-authored%20by%20Microsoft%20MVP%20Dishan%20Francis%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-280564%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EUse%20of%20DCPROMO%20is%20still%20the%20proper%20way%20to%20remove%20a%20DC%20server%20in%20an%20Active%20Directory%20infrastructure.%20Certain%20situations%2C%20such%20as%20server%20crash%20or%20failure%20of%20the%20DCPROMO%20option%2C%20require%20manual%20removal%20of%20the%20DC%20from%20the%20system%20by%20cleaning%20up%20the%20servers%20metadata.%20This%20blog%20post%20will%20help%20you%20accomplish%20this.%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20658px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F58810iC2CD39088DF0E231%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-1.png%22%20title%3D%22Manually-Removing-A-Domain-Controller-Windows-Server-1.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-280564%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAnthony%20Bartolo%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1039356%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Manually%20Removing%20A%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1039356%22%20slang%3D%22en-US%22%3E%3CP%3EIt%20doesn't%20delete%20a%20DC%2C%20it%20deletes%20everything%20because%20in%20this%20example%20you%20have%20only%20%3CSTRONG%3EONE%3C%2FSTRONG%3E%20DC.%20So%20-%20%3CSTRONG%3Enever%20do%20this%3C%2FSTRONG%3E!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1562183%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Manually%20Removing%20A%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1562183%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22sxs-lookup%22%3E%3CSPAN%3EWhen%20you%20use%20Remote%20Server%20Administration%20Tools%20(RSAT)%20or%20the%20Active%26nbsp%3BDirectory%20Users%20and%20Computers%20console%20(Dsa.msc)%20that%20is%20included%20with%20Windows%20Server%20to%20delete%20a%20domain%20controller%20computer%20account%20from%20the%20Domain%20Controllers%20organizational%20unit%20(OU)%2C%20%3CSTRONG%3Ethe%20cleanup%20of%20server%20metadata%20is%20performed%20automatically%3C%2FSTRONG%3E.%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22sxs-lookup%22%3E%3CSPAN%3EBefore%20Windows%20Server%202008%2C%20you%20had%20to%20perform%20a%20separate%20metadata%20cleanup%20procedure.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22sxs-lookup%22%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-ds%2Fdeploy%2Fad-ds-metadata-cleanup%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-ds%2Fdeploy%2Fad-ds-metadata-cleanup%3C%2FA%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1753720%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Manually%20Removing%20A%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1753720%22%20slang%3D%22en-US%22%3E%3CP%3EI%20think%20this%20info%20is%20a%20little%20obsolete.%3CSTRONG%3Ethe%20cleanup%20of%20server%20metadata%20is%20performed%20automatically%20as%20mentioned%20above.%3C%2FSTRONG%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2203736%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Manually%20Removing%20A%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2203736%22%20slang%3D%22en-US%22%3E%3CP%3EYes%20I%20confirm%20the%20observations%20of%20the%20respondents%20here%3A%26nbsp%3B%20After%20removing%20the%20server%20from%20ADUC%20and%20ADS%26amp%3BS%20the%20ntdsutil%20step%20is%20not%20needed.%26nbsp%3B%20It%20was%20probably%20from%20the%20Windows%202000%2F2003%20days.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EC%3A%5CUsers%5CAdministrator%26gt%3Bntdsutil%3CBR%20%2F%3Entdsutil%3A%20metadata%20cleanup%3CBR%20%2F%3Emetadata%20cleanup%3A%20remove%20selected%20server%20DC2%3CBR%20%2F%3EBinding%20to%20localhost%20...%3CBR%20%2F%3EConnected%20to%20localhost%20using%20credentials%20of%20locally%20logged%20on%20user.%3CBR%20%2F%3ELDAP%20error%200x22(34%20(Invalid%20DN%20Syntax).%3CBR%20%2F%3ELdap%20extended%20error%20message%20is%200000208F%3A%20NameErr%3A%20DSID-031001F7%2C%20problem%202006%20(BAD_NAME)%2C%20data%208350%2C%20best%20match%20of%3A'CN%3DNtds%20Settings%2CDC2'%3C%2FP%3E%3CP%3EWin32%20error%20returned%20is%200x208f(The%20object%20name%20has%20bad%20syntax.)%3CBR%20%2F%3E)%3CBR%20%2F%3EUnable%20to%20determine%20the%20domain%20hosted%20by%20the%20Active%20Directory%20Domain%20Controller%3CBR%20%2F%3E(5).%20Please%20use%20the%20connection%20menu%20to%20specify%20it.%3CBR%20%2F%3Emetadata%20cleanup%3A%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-815946%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Manually%20Removing%20A%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-815946%22%20slang%3D%22en-US%22%3E%3CP%3EJust%20to%20note%2C%20the%20steps%20to%20run%20ntdsutil%20in%20this%20guide%20seem%20to%20be%20truncated.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHowever%2C%20I%20had%20the%20same%20issue%20noted%20above.%20When%20it%20came%20time%20to%20select%20the%20DC%20for%20metadata%20cleanup%2C%20it%20was%20already%20gone%20after%20removing%20the%20server%20from%20AD%20Users%20and%20Computers%20and%20AD%20Sites%20and%20Services.%20Is%20there%20another%20way%20to%20verify%20full%20metadata%20removal%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2806597%22%20slang%3D%22en-US%22%3ERe%3A%20Step-By-Step%3A%20Manually%20Removing%20A%20Domain%20Controller%20Server%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2806597%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20there%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20somehow%20clicked%20on%20force%20removal%20during%20the%20removal%20process%20%2C%20then%20ended%20up%20with%20a%20dangling%20mess%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Enow%20I%20am%20trying%20to%20manually%20clean%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20got%20the%20same%20problem%20at%20step%203%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eanyway%2C%20it%20is%20good%20to%20know%20the%20AD%20can%20be%20manually%20cleaned%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EC%3A%5C%26gt%3Bntdsutil%3CBR%20%2F%3Entdsutil%3A%20metadata%20cleanup%3CBR%20%2F%3Emetadata%20cleanup%3A%20remove%20selected%20server%20KKDC%3CBR%20%2F%3EBinding%20to%20localhost%20...%3CBR%20%2F%3EConnected%20to%20localhost%20using%20credentials%20of%20locally%20logged%20on%20user.%3CBR%20%2F%3ELDAP%20error%200x22(34%20(Invalid%20DN%20Syntax).%3CBR%20%2F%3ELdap%20extended%20error%20message%20is%200000208F%3A%20NameErr%3A%20DSID-0310022D%2C%20problem%202006%20(BAD_NAME)%2C%20data%208350%2C%20best%20match%20of%3A%3CBR%20%2F%3E'CN%3DNtds%20Settings%2CKKDC'%3C%2FP%3E%3CP%3EWin32%20error%20returned%20is%200x208f(The%20object%20name%20has%20bad%20syntax.)%3CBR%20%2F%3E)%3CBR%20%2F%3EUnable%20to%20determine%20the%20domain%20hosted%20by%20the%20Active%20Directory%20Domain%20Controller%20(5).%20Please%20use%20the%20connection%20menu%20to%20specify%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Co-Authors
Version history
Last update:
‎Dec 23 2021 08:12 AM
Updated by: