Link to home
Start Free TrialLog in
Avatar of kjawahar
kjawahar

asked on

Unable to uninstall Active directoy

Unable to uninstall the Active Directory getting the error message
"The operation failed because: The directory service failed to replicate off changes made locally. Access denied:
This server is the Additional domain controller for the domain
Avatar of rpaquet
rpaquet

How does you try to uninstall it ?
To install Active Directory you run DCPROMO.
When AD is installed, if you re-run DCPROMO, AD will be uninstalled and of course, thus demoting you DC to member server.
How does you try to uninstall it ?
To install Active Directory you run DCPROMO.
When AD is installed, if you re-run DCPROMO, AD will be uninstalled and of course, thus demoting you DC to member server.
Avatar of kjawahar

ASKER

Yes
i am uninstalling using dcpromo only
How does you try to uninstall it ?
To install Active Directory you run DCPROMO.
When AD is installed, if you re-run DCPROMO, AD will be uninstalled and of course, thus demoting you DC to member server.
Perhaps you have to synchronize the two DCs before demote the server.
When you run DCPROMO, you get a screen saying "This is the last domain controller....".

Do NOT check the box - leave it blank.

This sounds like your problem.

-Dan






when you tried to uninstall AD, did you use a user account with an Enterprise Admin priviledge?  Make sure the administrators group or the account that you use has the "Enable computer and user accounts to be trusted for delegation".
If all else fails, you'll have to force your DC to become a member server.  You can do this by opening up your registry editor (regedit), navigate to hkey_local_machine\system\currentcontrolset\control\product options.  Change the value of ProductType from LanmanNT to ServerNT.  Reboot your server.  You will then need to logon locally using your AD restore mode adminstrator account and password.  On your DNS server, create a dummy zone (call it what you want - ie: removeAD.local).  Run dcpromo and create a new forest with using this dummy zone.  After reboot, run dcpromo again and get rid of AD on this particular server.  This will cleanly un-install AD from this server.  You'll need to clean up AD on the remaining ("good") DC.  Choose one of your remaining DC's and use the ntdsutil utility to clean up AD.  Following the instruction here to do it:  http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q216498

No comment has been added lately, so it's time to clean up this TA.
I will leave a recommendation in the Cleanup topic area that this question is:
[paq norefund]
Please leave any comments here within the next seven days.
 
PLEASE DO NOT ACCEPT THIS COMMENT AS AN ANSWER!
 
[ewtaylor]
EE Cleanup Volunteer
ASKER CERTIFIED SOLUTION
Avatar of Mindphaser
Mindphaser

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial