• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4952
  • Last Modified:

Remove Crashed Domain Controller from Domain

Hello ,

I have a forest with 2 domains controllers. Windows 2008r2 .  Primary and secondary.

The secondary domain controller have crashed completely . It is a virtual machine and it has corrupt data.

So , any ideas how force remove the secondary domain controller to add a new one ?

Anestis Psomas
Anestis Psomas
3 Solutions
Miguel Angel Perez MuñozCommented:
If your damaged domain controller boots and start try this command: dcpromo /forceremoval
If does not boot, delete damaged virtual machine and make a metadata cleanup of damaged dc: http://technet.microsoft.com/es-es/library/cc816907(v=ws.10).aspx

To add a new domain controller, simply setup and install a new server and run dcpromo from command line.
SandeshdubeySenior Server EngineerCommented:
If server is online you can run dcpromo force removal on Secondary Dc and then perfrom metadata cleanup.But if the server is offline and cannot be brought back then you need to just perfrom metadata cleanup.

Forcefull removal of DC: http://support.microsoft.com/kb/332199
Metadata cleanup: http://www.petri.co.il/delete_failed_dcs_from_ad.htm

Complete Step by Step Guideline to Remove an Orphaned Domain controller (including seizing FSMOs, running a metadata cleanup, and more)

Hope this helps
Mike KlineCommented:
Did the crashed DC hold any FSMO roles?   I'm assuming it did not.  You will have to cleanup the metadata from that dead box.   You just need to delete that box in ADUC from your good DC


You can then build a new box and promote it.


Easily Design & Build Your Next Website

Squarespace’s all-in-one platform gives you everything you need to express yourself creatively online, whether it is with a domain, website, or online store. Get started with your free trial today, and when ready, take 10% off your first purchase with offer code 'EXPERTS'.

Miguel Angel Perez MuñozCommented:
Forget to add one more thing. Check where are your FSMO roles: http://www.petri.co.il/determining_fsmo_role_holders.htm
If your FSMO roles are in damaged dc, you must to seize them: http://support.microsoft.com/kb/255504/
If you can not boot the secondary DC, then you will have to manually remove the data from Active Directory.

Please check  

Clean up server metadata

Another good resource
Sarang TinguriaSr EngineerCommented:
Make sure your working DC is authoritative time source and in sync with external time source
Refer below article to achieve the same.

Anestis PsomasSystem and Network AdministratorAuthor Commented:
Thanks all for your help,

with the guides you gave me i have managed to remove the failed DC.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now