jimmieandersson
asked on
How to remove Active Directory server role in Safe Mode
My Windows 2003 server will not start properly after a power failure.
Just before Log on screen should appear I get a error message thats something like this: "...Directory Services cannot start... Please click OK to shutdown the system and reboot into the Directory Services Restore Mode"
I restart, press F8 and go into the Directory Service Restore Mode.
I followed this KB, http://support.microsoft.com/kb/258062 and I tried all the steps without success.
The thing is that I don't use the Active Directory, so I just want to uninstall it and maybe reinstall it later but right now I just need to use the rest of the server roles installed on the machine.
How to do that in safe mode? When I go to "manage your server" and choose to uninstall this role it only tells me it can't be done in safe mode and it should be done i normal mode.
But I cant get there!! :) is their a way to disable Active directory on start up so I can log on at normal mode and remove this server role? or can I perhaps remove it in safe mode somehow?
Just before Log on screen should appear I get a error message thats something like this: "...Directory Services cannot start... Please click OK to shutdown the system and reboot into the Directory Services Restore Mode"
I restart, press F8 and go into the Directory Service Restore Mode.
I followed this KB, http://support.microsoft.com/kb/258062 and I tried all the steps without success.
The thing is that I don't use the Active Directory, so I just want to uninstall it and maybe reinstall it later but right now I just need to use the rest of the server roles installed on the machine.
How to do that in safe mode? When I go to "manage your server" and choose to uninstall this role it only tells me it can't be done in safe mode and it should be done i normal mode.
But I cant get there!! :) is their a way to disable Active directory on start up so I can log on at normal mode and remove this server role? or can I perhaps remove it in safe mode somehow?
nog_lorp - you realize that in 2000 and 2003 Active Directory doesn't run as a system service that can be started and stopped from the Services MMC, yes? That won't be available until 2008 is released.
jimmie - I've occasionally (though not 100%) had success in that situation by booting into Safe Mode and renaming the directory containing the ntds.dit file (c:\windows\ntds by default), then booting back into normal mode. If that works, you'll then have some cleanup to do:
[1] On the problem DC in question, run dcpromo /forceremoval once you're in normal mode
[2] From a working DC, perform a metadata cleanup of the failed DCs info: (MS KB 216498)
[3] Also from a working DC, seize any FSMO roles that were held by the failed DC: http://support.microsoft.com/kb/255504
[4] If the failed DC was the PDC Emulator of your forest root domain, configure a new DC with an authoritative time source: http://support.microsoft.com/kb/816042
jimmie - I've occasionally (though not 100%) had success in that situation by booting into Safe Mode and renaming the directory containing the ntds.dit file (c:\windows\ntds by default), then booting back into normal mode. If that works, you'll then have some cleanup to do:
[1] On the problem DC in question, run dcpromo /forceremoval once you're in normal mode
[2] From a working DC, perform a metadata cleanup of the failed DCs info: (MS KB 216498)
[3] Also from a working DC, seize any FSMO roles that were held by the failed DC: http://support.microsoft.com/kb/255504
[4] If the failed DC was the PDC Emulator of your forest root domain, configure a new DC with an authoritative time source: http://support.microsoft.com/kb/816042
Laura, didn't realize that, thanks for the info though. Guess I'm out of my depth here.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
PS
We can guide you through this process. But, the answer will be lengthy.
We can guide you through this process. But, the answer will be lengthy.
ASKER
thanks everyone for your answers!
I tried Lauras solution by renaming c:\windows\NTDS to c:\windows\NTDS-070916 and then rebooted into normal mode but I got the exact same message.
I don't think it matters by I wrote it down this time:
"Isass.exe - System Error
Security Accounts Manager initialaxation failed because of the following error: Directory Service cannot start. Error status: 0x00002e1. Please click OK to shutdown this system and reboot into Directory Restore Mode, check the ecent log for more detail information"
ChiefIT, How exactly did you do this; "My solution was to remove active directory by demoting it"
is there another way then Lauras way?
I tried Lauras solution by renaming c:\windows\NTDS to c:\windows\NTDS-070916 and then rebooted into normal mode but I got the exact same message.
I don't think it matters by I wrote it down this time:
"Isass.exe - System Error
Security Accounts Manager initialaxation failed because of the following error: Directory Service cannot start. Error status: 0x00002e1. Please click OK to shutdown this system and reboot into Directory Restore Mode, check the ecent log for more detail information"
ChiefIT, How exactly did you do this; "My solution was to remove active directory by demoting it"
is there another way then Lauras way?
ASKER
I think I solved it now, I googled on demoting Active Directory and found http://support.microsoft.com/kb/332199, followed "If the domain controller cannot start in normal mode"
thanks everyone
thanks everyone
(Faster way to get to services dialog: Start->Run "services.msc")