Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Demoting 2003 DC

Posted on 2011-03-24
9
Medium Priority
?
430 Views
Last Modified: 2013-11-05
I am looking to demote a Windows 2003 DC and make it part of workgroup and I have few questions :-
a) What command I use to demote the DC dcpromo
b) After the demotion what happens to the various roles that server is part of.
c) Do I have to reinstall the OS to demote or there is no need for it
d) After the demotion should I create local accounts on the users to login to server
0
Comment
Question by:openjohn
  • 2
  • 2
  • 2
  • +2
9 Comments
 
LVL 18

Accepted Solution

by:
Netflo earned 2000 total points
ID: 35209190
Hi Openjohn

a. Start -> Run -> DCPROMO. Follow the wizard which will require you to set the local admin password and whether this is the last DC in the forest.

b. The roles will remain, unless there are any dependencies, such as if the DC was a CA (Issuing Certificates).

c. No need to reinstall the OS, as good as it was before.

d. Yes after demotion, you will have to create local users for it to operate in a workgroup.

Hope that helps.
0
 
LVL 27

Expert Comment

by:davorin
ID: 35209262
http://technet.microsoft.com/en-us/library/cc740017(WS.10).aspx

Adding to b.
If you are talking to FSMO roles and it is the only (last) DC in your domain, the roles will disappear like AD domain will.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 35209265
You would run dcpromo to demote the server.

Depending on what roles you are talking about before demotion you would need to transfer fsmo roles to existing Domain Controller.

You don't need to reinstall if you are just demoting.

You would need to have local users to access the server.
0
Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

 
LVL 96

Expert Comment

by:Lee W, MVP
ID: 35209570
Why would you use a Workgroup over a domain, when you already have a domain?  A few basic things to understand and it's far more reliable than a workgroup and there is no cost benefit to be a workgroup - it's usually more expensive since you decentralize management.
0
 

Author Comment

by:openjohn
ID: 35210028
Need a workgroup for the simple network. The server is also hosting a website which might need to be redirected...
Does the local users needs to be created on the server ?.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 35210060
Yes, after it has been demoted.

You can still leave the server as a member server of the domain
0
 
LVL 96

Expert Comment

by:Lee W, MVP
ID: 35211923
How does a workgroup simplify?  With a workgroup, your users have to keep separate accounts on all your workstations that they want to log in and access data on. You cannot easily manage all the systems from one location, and when you upgrade, you have to start from scratch, creating new user accounts and re-configuring permissions.  Sorry, but a workgroup does not simplify anything.
0
 
LVL 27

Expert Comment

by:davorin
ID: 35213129
I do agree with leew. Even if you have a server and just a single client computer is simpler manage network using domain than workgroup.
0
 
LVL 18

Expert Comment

by:Netflo
ID: 36228682
Hi,

Did any of the solutions here help you, in order to close this question down?
0

Featured Post

Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
Despite its rising prevalence in the business world, "the cloud" is still misunderstood. Some companies still believe common misconceptions about lack of security in cloud solutions and many misuses of cloud storage options still occur every day. …

926 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question