Solved

demote a domain

Posted on 2007-03-29
4
871 Views
Last Modified: 2010-03-05
how to demote a domain controller?
0
Comment
Question by:Dennis_Wilcox
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 2

Assisted Solution

by:gabrielaz
gabrielaz earned 500 total points
ID: 18818036
dc promo from the run command of the domain controller.
0
 
LVL 96

Expert Comment

by:Lee W, MVP
ID: 18818061
Don't forget to manually remove the FSMO roles (move them to another server).
0
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 18818111
           It is not dc promo. It is dcpromo. If the server you are demoting is a secondary domain controller in domain, do not choose "this is the only server left in domain". If it is the PDC and there is no other servers left in domain, choose this option.
          As leew said, if this is the PDC, and there is another GDC already in domain, and if you want this "domain" stay alive and work correctly, you should transfer FSMO roles by using ntdsutil.exe, which is part of server support tools.
               
0
 
LVL 2

Accepted Solution

by:
gabrielaz earned 500 total points
ID: 18818118
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question