I have a remote DC that stopped replicating, "access denied" message. I 'm having it shipped back for a rebuild. MS support said to run the dcpromo /forceremoval from a working domain controller. Is this correct? I thought you would run it from the non-working DC. I'm just worried of forcefully demoting a good DC. Thanks!