In our Windows 2003 network we have two active domain controllers. I say active because listed in the Active Directory Sites and Services (Sites, Default-First-Site-Name, Servers) there are 4 servers listed. One of these, let's call it Server-X, has no objects associated with it and it has long been powered down, two are legit domain controllers, and the final one, let's call it Server-Y, appears as a legit DC but I am having trouble removing it.
So, Server-X must go. I was already under the assumption that it was removed... so would it be safe to delete it from the AD:Sites and Services DFSN Servers list?
Server-Y must also go but I'm having trouble removing it using the dcpromo wizard. This server is actually causing issues because workstations within the domain, every now and again, try to authenticate against it and get rejected. Should I just use dcpromo /forceremoval?
Thank you
Answer
I would use /forceremoval only as a last resort, it is probably stopping you for what it considers to be a very good reason. First question, are all your Operations Masters accounted for. Active Directory won't like removing a DC that is acting in one of those Single Master roles.
No comments:
Post a Comment