asked on I can't remove decommissioned DC from 2012 server
I took over support for a small non-profit. The old IT company was hosting their domain controller (OldDC). I installed a new DC (NewDC) on-premise with 2012 Foundation, joined it to the domain and made it a domain controller. We changed Internet providers about the same time. The old IT provider could not get the VPN to connect, after changing the Internet provider (that one still stumps me). OldDC is still a domain controller in my AD, but I can no longer access it.
If I go to ADUC and select to delete OldDC, i get the "you are attempting to delete a Domain Controller without running the removal wizard..." message. I check the box for Delete this DC anyway and click the Delete button. Here's the message I get.
Windows cannot delete object
LDAP://NewDC.mydomain.org/
Access is denied
I can't run a DCPROMO /FORCEREMOVAL because that's now incorporated into Server Manager.
I ran NTDSUTIL and when I listed the servers in site, it only lists NewDC. I tried to select server OldDC, anyway, but it said invalid syntax.
Can anyone offer a suggestion on how to remove this old server?
If I go to ADUC and select to delete OldDC, i get the "you are attempting to delete a Domain Controller without running the removal wizard..." message. I check the box for Delete this DC anyway and click the Delete button. Here's the message I get.
Windows cannot delete object
LDAP://NewDC.mydomain.org/
Access is denied
I can't run a DCPROMO /FORCEREMOVAL because that's now incorporated into Server Manager.
I ran NTDSUTIL and when I listed the servers in site, it only lists NewDC. I tried to select server OldDC, anyway, but it said invalid syntax.
Can anyone offer a suggestion on how to remove this old server?
Windows Server 2012Active Directory
Last Comment
Rob Wesley
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
You can try removing it via powershell as well. Open up powershell (run as administrator)
run this command
Uninstall-ADDSDomainContro
ref link:
https://technet.microsoft.com/en-us/library/hh974714(v=wps.630).aspx
run this command
Uninstall-ADDSDomainContro
ref link:
https://technet.microsoft.com/en-us/library/hh974714(v=wps.630).aspx
ASKER
Foxluv, wouldn't that remove AD from the server I run the command from?
I need to remove OldDC (which I can't get to any longer) from the AD installed on NewDC.
I believe this is the command I would want to run on OldDC, not NewDC.
I need to remove OldDC (which I can't get to any longer) from the AD installed on NewDC.
I believe this is the command I would want to run on OldDC, not NewDC.
I would strongly suggest reading this:
https://technet.microsoft.com/en-us/library/jj679892.aspx
and would check on parameters/limits and (roles and features)/(Availability and limitations)
Does anything within your network exceed limits or limitations?
Rob
https://technet.microsoft.com/en-us/library/jj679892.aspx
and would check on parameters/limits and (roles and features)/(Availability and limitations)
Does anything within your network exceed limits or limitations?
Rob
FSMO Roles?
https://support.microsoft.com/en-us/kb/255504
Rob