Solved

How can i remove a total Domain from my Forest

Posted on 2007-12-06
23
351 Views
Last Modified: 2010-03-17
Hi,

I have a Domain which has another domain.
How do i remove the Domain and all its traces.
> Root Domain
>> Child Domain

How do i remove the child Domain.

Regards'
Sharath
0
Comment
Question by:bsharath
  • 10
  • 9
  • 2
  • +2
23 Comments
 
LVL 70

Expert Comment

by:KCTS
Comment Utility
remove all of the DCs for the child domain with DCPromo - make sure that when you remove the last one (the FSMO role holder for the child domian) you specify "This is the last domain controller in the domain" check box.
0
 
LVL 11

Author Comment

by:bsharath
Comment Utility
I get an error when using DCPROMO

The operation failed because:
Active directory could not transfer the remaining data in directory partition
"The DSA operation is unable to proceed because of the DNS lookup failure"

There is no DNS configured in the server yet

0
 
LVL 1

Expert Comment

by:sterudpa
Comment Utility
how many servers are we talking about?
0
 
LVL 11

Author Comment

by:bsharath
Comment Utility

> Root Domain has 2 Dc's
>> Child Domain 1 Dc
0
 
LVL 22

Expert Comment

by:cj_1969
Comment Utility
did you remove the server that was acting as the DNS server for that domain?
If you did you will probably need to configure that service on the last machine in your domain or make it a stand-alone function (not integrated with AD) and have it on another server.
0
 
LVL 11

Author Comment

by:bsharath
Comment Utility
Child Domain does not have a DNS
Only the root domain has DNS configured.
0
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 250 total points
Comment Utility
Or forcibly remove the DC in the child domain using dcpromo /forceremoval, and then perform a metadata cleanup from the root domain of the now-orphaned child domain.  The following article shows you sample ntdsutil commands to remove an orphaned domain; you will need to modify these commands as appropriate for your environment: http://www.windowsitpro.com/Articles/ArticleID/13415/13415.html?Ad=1
0
 
LVL 1

Expert Comment

by:sterudpa
Comment Utility
you are trying to remove the child domain?
0
 
LVL 30

Expert Comment

by:LauraEHunterMVP
Comment Utility
From the original post:

> "How do i remove the child Domain."

Based on this I presume that the OP is attempting to completely remove an Active Directory domain.  If that is not the case, then my instructions are not applicable, and the OP should clarify what they are trying to accomplish.
0
 
LVL 11

Author Comment

by:bsharath
Comment Utility
sterudpa
Yes
0
 
LVL 1

Expert Comment

by:sterudpa
Comment Utility
are all servers running and reachable?  Do they have DNS running?
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 11

Author Comment

by:bsharath
Comment Utility
LauraEHunterMVP

I have a domain which was running fine.Now i just installed a
Additional Domain controller on my existing domain.
I just want to remove this.What should i do.When i tryed Dcpromo it gives the error.
0
 
LVL 11

Author Comment

by:bsharath
Comment Utility
I want the root domain and all the dc's relevant to it to be as it is.
Just want to remove the child domain and all its traces from my root domain dc's
0
 
LVL 1

Assisted Solution

by:sterudpa
sterudpa earned 250 total points
Comment Utility
Check this out.  it talks about DCPROMO /Forceremoval and gives a good description about what to do.

http://www.jsifaq.com/SF/Tips/Tip.aspx?id=7521

0
 
LVL 1

Expert Comment

by:sterudpa
Comment Utility
I guess I am wondering what information we are missing.  Why wont the Dcpromo work?  Can you ping the DNS server?  Does the child DC have it's ip settings DNS pointing to a server in the domain with DNS running on it?

0
 
LVL 11

Author Comment

by:bsharath
Comment Utility
Thanks i have used the Dcpromo /forceremoval and cleaned up the Child domain.Now its a stand alone domain.

Now how do i remove the traces from the Root domain and all its dc's
0
 
LVL 1

Expert Comment

by:sterudpa
Comment Utility
0
 
LVL 11

Author Comment

by:bsharath
Comment Utility
I have got stuck here
Click Start, point to Programs, point to Accessories, and then click Command Prompt.
2. At the command prompt, type ntdsutil, and then press ENTER.
3. Type metadata cleanup, and then press ENTER. Based on the options given, the administrator can perform the removal, but additional configuration parameters must be specified before the removal can occur.
4. Type connections and press ENTER. This menu is used to connect to the specific server where the changes occur. If the currently logged on user does not have administrative permissions, different credentials can be supplied by specifying the credentials to use before making the connection. To do this, type set creds DomainNameUserNamePassword, and then press ENTER. For a null password, type null for the password parameter.
5. Type connect to server servername, and then press ENTER. You should receive confirmation that the connection is successfully established. If an error occurs, verify that the domain controller being used in the connection is available and the credentials you supplied have administrative permissions on the server.
 

When i type the credentials it does not accept nor when i give null
How should i mention the credentials

I just need to remove the traces of my child domain on the root domain dc's
0
 
LVL 1

Expert Comment

by:sterudpa
Comment Utility
should be
"set creds" domainname (space) username (space) password

it worked on mine.  
0
 
LVL 11

Author Comment

by:bsharath
Comment Utility
which domain name should i mention as the child domain i have already demoted it.

Now on the root domain dc's i am doing this.Is that correct.

I tried this command but get error 80070057

0
 
LVL 1

Expert Comment

by:sterudpa
Comment Utility
should be the root domain.  is the error you get "80070057 parsing input"?
0
 
LVL 1

Expert Comment

by:sterudpa
Comment Utility
to clarifiy,  you shoud be doing this on one of the servers that are still up and with a account that has admin rights.
0
 
LVL 11

Author Comment

by:bsharath
Comment Utility
I am doing this from the root Domain - Domain controller.

I have logged to the machine with the Domain admin credentials.


0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Join & Write a Comment

Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
Resolve DNS query failed errors for Exchange
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now