Remove Crashed Domain Controller from Domain

Hello ,

I have a forest with 2 domains controllers. Windows 2008r2 .  Primary and secondary.

The secondary domain controller have crashed completely . It is a virtual machine and it has corrupt data.

So , any ideas how force remove the secondary domain controller to add a new one ?

Thanks
Anestis PsomasSystem and Network AdministratorAsked:
Who is Participating?
 
Miguel Angel Perez MuñozConnect With a Mentor Commented:
If your damaged domain controller boots and start try this command: dcpromo /forceremoval
If does not boot, delete damaged virtual machine and make a metadata cleanup of damaged dc: http://technet.microsoft.com/es-es/library/cc816907(v=ws.10).aspx

To add a new domain controller, simply setup and install a new server and run dcpromo from command line.
0
 
SandeshdubeyConnect With a Mentor Senior Server EngineerCommented:
If server is online you can run dcpromo force removal on Secondary Dc and then perfrom metadata cleanup.But if the server is offline and cannot be brought back then you need to just perfrom metadata cleanup.

Forcefull removal of DC: http://support.microsoft.com/kb/332199
Metadata cleanup: http://www.petri.co.il/delete_failed_dcs_from_ad.htm

Complete Step by Step Guideline to Remove an Orphaned Domain controller (including seizing FSMOs, running a metadata cleanup, and more)
http://msmvps.com/blogs/acefekay/archive/2010/10/05/complete-step-by-step-to-remove-an-orphaned-domain-controller.aspx

Hope this helps
0
 
Mike KlineConnect With a Mentor Commented:
Did the crashed DC hold any FSMO roles?   I'm assuming it did not.  You will have to cleanup the metadata from that dead box.   You just need to delete that box in ADUC from your good DC

http://technet.microsoft.com/en-us/library/cc816907(v=ws.10).aspx

You can then build a new box and promote it.

Thanks

Mike
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
Miguel Angel Perez MuñozCommented:
Forget to add one more thing. Check where are your FSMO roles: http://www.petri.co.il/determining_fsmo_role_holders.htm
If your FSMO roles are in damaged dc, you must to seize them: http://support.microsoft.com/kb/255504/
0
 
babuseCommented:
If you can not boot the secondary DC, then you will have to manually remove the data from Active Directory.

Please check  
http://support.microsoft.com/kb/216498

 
Clean up server metadata
http://technet.microsoft.com/en-us/library/cc736378%28WS.10%29.aspx

Another good resource
http://www.petri.co.il/delete_failed_dcs_from_ad.htm
0
 
Sarang TinguriaSr EngineerCommented:
Make sure your working DC is authoritative time source and in sync with external time source
Refer below article to achieve the same.

http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/A_10789-Time-Service-Configuration.html
0
 
Anestis PsomasSystem and Network AdministratorAuthor Commented:
Thanks all for your help,

with the guides you gave me i have managed to remove the failed DC.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.