How to remove NT 4 BDC from 2003 Active Directory

It’s amazing that someone still has an NT 4.0 server on their network ... its 2010!!

Anyways, a client of mine has an AD 2003 with two 2003 DCs and also two NT 4.0 BDCs. I am looking to remove the BDCs from the domain so I can raise the AD level to ‘Native’ from its current ‘Interim’ level. I need to raise it to be able to create a forest-level domain trust with another AD.

My question is; what is the most graceful way to remove the NT 4.0 BDCs? I recall that you cannot remove a NT PDC without upgrading to 2003 then demoting it, but is that true for a BDC as well? If I launch " srvmgr " console on the BDC, I can see an option to remove it from domain, would that work? Or can I just delete the computer account from AD users & computers MMC?

Hopefully there is still an NT guru out there that can help...I don't want to end up messing up AD! Thanks!
LVL 1
lehanAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

mcsweenSr. Network AdministratorCommented:
0
lehanAuthor Commented:
Yeah I found this link but I want to make sure that someone tried this method and it works with no issues. The reason is I also found several article on the net claiming that there is no way to remove a BDC except for upgrading it to 2000 or 2003 then demoting it to memeber server, am I missing something?

from: http://support.microsoft.com/kb/555521 
1. Log on into the BDC (Backup Domain Controller) with account that is member in "Domain Admins" users group.
 2. Go to "Start" -> "Run" -> Write "Srvmgr" and press on "Enter" button.
 3. Remove the BDC (Backup Domain Controller) computer account from the domain.
0
mcsweenSr. Network AdministratorCommented:
I have done this in the past with no issues.  Make sure you follow Section B as well which says to delete all DNS and WINS records for this machine too.

The key DNS records are the "Same as Parent Folder" A records in the domain forward lookup zone.  Delete the ones that point to the BDC's IP.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

lehanAuthor Commented:
Ok, great, that really helps.

To confirm:
1) follow instaruction on Section A, Option B to remove BDC from domain
2) follow instructions in Section B to cleanup DNS/WINS records
Also, since I have 2 BDCs, I am assuming I would run Srvmgr on each BDC and remove itself from the domain? what happens to the BDC at this point (not that I care much) but does it become inaccessible since I will be logged in as the domain admin acct?
0
mcsweenSr. Network AdministratorCommented:
I can't be certain what will happen as when I did it I immediately shut it down and pulled the hard drives to degauss (big magnet).
0
lehanAuthor Commented:
Quick update; I was able to remove both BDCs from AD using 'srvmgr' which I ran on each BDC. After deleting them from AD, I deleted them from WINS. There were no records for them in DNS.
Once removed from AD, I disconnected the network cable and was still able to access them using the domain admin acct!

Now I should be able to raise the domain and forest level to 'native'. Any tips, gotchas or best practices to watch for or is it straight forward?

Thanks for the help so far and I will accept your solution to give you the points shortly...
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.