Active Directory cleaning after role seizure

Hi everyone,

I had a network with the 2 DC's below.

DC 1: Windows Server 2003, holder of all FSMOs.
DC 2: Windows Server 2008.

DC1 died, and it was not possible to recover.  I seized all roles on DC2, and the domain is working just fine.

My question...

I need to clean up the AD by removing all references to DC1.  As DC1 is forever a memory, what is the best (and complete) way to do this?


I know that this will most likely involve ADSI.  If so, please be as specific as possible.

Many, many thanks!

Barron
LVL 2
Barron FrakerSystems Administrator/IT TrainerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Alan HardistyCo-OwnerCommented:
The best way to do this is using ntdsutil and the correct steps are outlined in the following link:

http://www.petri.co.il/delete_failed_dcs_from_ad.htm
Mike KlineCommented:
It used to involve ntdsutil  (you can still use that method)  but in 2008 it gets easier because a lot of it is through the GUI

http://technet.microsoft.com/en-us/library/cc816907(v=ws.10).aspx

when this is done and you are ready try and get another DC up as soon as you can.   This example is perfect for illustrating why 2 DCs is always key.

Thanks

Mike

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
arnoldCommented:
The server might not be coming back, but unless you wait till tombstone period the setup a second dc as recommended, the dc1 can be reused for the replacement server.
Barron FrakerSystems Administrator/IT TrainerAuthor Commented:
alanhardisty and  mkline71,

Both your posts were helpful.  The GUI-based approach made this last a lot less longer than I had expected, but true to form, Microsoft's solution was incomplete.  Alan's Petri link filled in the blanks (like cleaning out DNS), so now everything is running smoothly.

Thanks to you both!

Barron
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.