• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 9903
  • Last Modified:

How to remove Active Directory from a Domain Controller when DCPROMO fails?

Trying to dcpromo-down a Domain Controller, getting this error:

Active Directory Installation Failed
The operation failed because:
The Directory Service failed to replicate off changes made locally.
"The DSA operation is unable to proceed because of a DNS lookup failure."

Microsoft articles abound on fixing the DNS in a domain but my DNS IS NOT BROKEN!  I can ping every server by name from any server/workstation and all the srv records that should exist do exist.

This is some other problem.

Any idea what ACTUALLY is wrong?
0
gateguard
Asked:
gateguard
  • 3
  • 2
1 Solution
 
gateguardAuthor Commented:
Removed DNS from server then tried again:

Active Directory Installation Failed
The operation failed because:
The Directory Service failed to replicate off changes made locally.
"Logon Failure: The target account name is incorrect."
0
 
4auHukCommented:
Hi gateguard,

Check this MSKB articles.

Using the DCPROMO /FORCEREMOVAL Command to Force the Demotion of Active Directory Domain Controllers:
http://support.microsoft.com/default.aspx?scid=kb;en-us;332199

HOW TO: Remove Data in Active Directory After an Unsuccessful Domain Controller Demotion:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;216498

Using Ntdsutil.exe to Seize or Transfer FSMO Roles to a Domain Controller:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;255504

There's also a quisk way to remove AD from server after failed demotion. Not tested it personally:

3222 ยป How do I remove Active Directory if the demotion failed?
http://www.jsifaq.com/SUBG/TIP3200/rh3222.htm

hth,
4auHuk

0
 
gateguardAuthor Commented:
This computer is remote from me and I'm still waiting to hear whether or not they can log on to directory services restore mode (one of the steps above).  As soon as I determine that, I will use the HOW TO: Remove Data in Active Directory After an Unsuccessful Domain Controller Demotion.
0
 
4auHukCommented:
To make it clear:

When demotion fails, you have two problems:
1. You still need to remove AD from server in question. You can do this forcebly, but then Active directory on other domain controllers will not be cleared from references to this server.
Hence,
2. You will need to remove references to this server from Active directory (other "live" domain controllers) manually.

"HOW TO: Remove Data in Active Directory After an Unsuccessful Domain Controller Demotion" article addresses second issue. You don't do what described in this article on server which you need to demote. You do this on other domain controllers.

What you need to do with server you trying to demote is described in first and last links mentioned above.

4auHuk
0
 
4auHukCommented:
Thanks :)
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now