Active Directory 2008: AD DS Removal Facts…

AD DS Removal Facts

Similar to AD DS installation, there are three tools you can use to remove a domain controller:

  • The      Active Directory Domain Services Installation Wizard removes domain      controllers in a prompted environment in the same manner it adds domain      controllers. Use dcpromo.exe to start the Active Directory Domain      Services Installation Wizard.
  • The      command line uses the dcpromo command combined with unattended      installation switches and parameter values to remove domain controllers.
  • An      answer file is called by the dcpromo command to remove domain      controllers.

The following table describes what to do in specific uninstall scenarios:

Scenario Description
Remove a domain controller from a domain You should know the following   about removing a domain controller from a domain:

  • You must be a member of the        Domain Admins group in the domain to perform this procedure.
  • If necessary, you must first        transfer the operations master roles hosted by the domain controller to        other domain controllers.
  • If you are using the wizard        to perform this task, do not choose the Delete the domain        option.
  • If you are using the command        line to perform this task, use dcpromo combined with unattended        installation switches and parameter values.
  • If you are using an answer        file to perform this task, include the removeapplicationpartitions=yes        and removeDNSDelegation=yes entries.
Remove the last domain controller from a domain You should know the following   about removing the last domain controller from a domain:

  • You must be a member of the        Enterprise Admins group in the forest to perform this procedure.
  • You must move all forest        operations master roles before you can remove the last domain controller        from a domain.
  • If you are using the wizard        to perform this task, select the Delete the domain option and        proceed through the wizard prompts.
  • If you are using an answer        file to perform this task, include the IsLastDCInDomain=yes        entry.
  • If you are using the command        line to perform this task, use the /IsLastDCInDomain:Yes and /DemoteFSMO:Yes        switches.
Remove the last domain controller from a forest You should know the following   about removing the last domain controller from a forest:

  • You must be a member of the        Domain Admins group in the forest root domain or a member of the        Enterprise Admins group in the forest to perform this procedure.
  • If you are using the wizard        to perform this task, select the Delete the domain and forest        option and proceed through the wizard prompts.
  • If you are using the answer file        and command line methods to perform this task, they are the same as if        you were removing the last domain controller from a domain. Because the        forest root domain is the domain that you are removing, the options for        removing the domain effectively remove the forest itself.
Forced removal of a domain controller Forcefully remove a domain   controller only if the domain controller has no connectivity with other   domain controllers. You should know the following about forcefully removing a   domain controller from a domain:

  • You must be a member of the        Domain Admins group in the domain to perform this procedure.
  • You must manually update the        forest metadata after you remove the domain controller because the        AD DS forest metadata is not automatically updated, as is the case        when a domain controller is removed normally.
  • If you are using the wizard        to perform this task, go to the Force the Removal of Active Directory        Domain Services page and proceed through the wizard’s prompts.
  • If you are using the command        line to perform this task, use the dcpromo /ForceRemoval        command. In addition, use /DemoteFSMO command to force the        removal of AD DS even if an operations master role is held by the domain        controller.

Note: If you cancel the Active Directory Domain Services Installation Wizard during installation, the AD DS binary files are not removed. To uninstall the binary files, use Server Manager to uninstall the AD DS role or run dcpromo /uninstallBinaries at the command line, and then restart the computer.

 

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s