asked on

DC removal

ENvironment: 3 DCs
1- Windows 2008 R2, DC, DNS
2 Windows 2008 SP2, DC, DNS, DHCP, holds all 4 FSMO roles
3 Windows 2003 SP2 DC, DNS - This server has failed

Problem
The Windows 2003 DC has failed (too old)
I need to remove it from AD
Cannot be properly demoted since it has an hardware problem

Can I just go into AD and AD SITES in one of the 2008 DCs and delete the failed 2003 DC? Everything in the graphical interface?
Or do I still have to go to NTDSUTIL to do it?

Thanks

Dan McFadden

I would go thru the following procedure described in the link below. Use NTDSUTIL to clean up old metadata left behind by the failing DC.

http://www.petri.com/delete_failed_dcs_from_ad.htm

Dan

Seth Simmons

holds all 4 FSMO roles

there are 5 FSMO roles; assume that is a typo?

Can I just go into AD and AD SITES in one of the 2008 DCs and delete the failed 2003 DC? Everything in the graphical interface?

on the one hand, deleting it manually from there will cause the other servers to stop trying to replicate to it. on the other hand, there are other little things lingering that you need to clean up which the link posted above can assist with

Gad SAADIA

ASKER

Yes 5 FSMO Roles on the Windows 2008 SP2, It was a typo

SO I understand is better to use NTDSUTIL

ASKER CERTIFIED SOLUTION

Seth Simmons

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Gad SAADIA

ASKER

OK, thank you