Need to remove old DC from AD Sites & services 1

[deisehun]

I have a Windows 2000 SP4 PDC a Windows 2000 SP4 BDC

In Active Directory Sites & Services, under Sites/Domainname/Servers - I have an old dc listed, which is longer onthe network.

I want to remove this old dc - I tried to simply delete, but got an Access denied message.

Can anyone tell me how to do this?

I also want to demote the existing PDC to a BDC and Vica versa - can anyone help me?

One last question - I have a Windows 2000 SP4 server that I want to make a DC - will it affect any applications on it,if I do this?

Thanks...

 

[Davetoo]

There are no PDC's or BDC's with the advent of W2K, they are all DC's that hold specific FSMO roles.

This article will help you determine which server holds what role:

http://support.microsoft.com/kb/234790

If your old server that you're trying to remove still holds a role in your schema, you'll have to seize that role to another server before moving forward. How did you remove the old server from your domain? Did you DCPROMO it out or just shut it off?

What applications are running on the server you wish to make a DC? We can't just blindly say "yes" or "no" to that question.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

 

[deisehun]

Thanks for that.

The Server I assumed was the PDC has most of the roles mentioned. Can I simply change those roles to the other DC mentioned - i.e it says Server A has role x - click 'change' to change that role to Server B - can I do this without a reboot and without affecting network operations?

The Infrastructure role is held by an old dc that bluescreened - it says it cant be changed as it's offline - is there any other way to change this role?

 

[pagy]

Transfer FSMO roles

http://www.petri.co.il/transferring_fsmo_roles.htm

Sieze FSMO roles

http://www.petri.co.il/seizing_fsmo_roles.htm

Paul

MCSE 2003

"Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe."
Albert Einstein

 

[deisehun]

That worked perfect - cheers

One last question - The old server that had the infrastructure role, is still listed under AD Sites & Services - under Sites/Domain name/Servers - it no longer has an FSMO role

Can I simply delete it from here?

 

[Davetoo]

Is the server still available for demotion, i.e. still a DC on the network?

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

 

[deisehun]

No, the server is question is long gone.

 

[deisehun]

I'm getting a lot of the errors described here -

http://support.microsoft.com/kb/314294

- e.g -

Event Type: Error
Event Source: MSExchangeDSAccess
Event Category: (3)
Event ID: 2102
Date: 1/1/2002
Time: 12:00:00 AM
User: N/A
Computer: EXCHANGE1
Description: Process MAD.EXE (PID=1088). All Domain Controller Servers in use are not responding:
dc1.company.com
dc2.company.com
dc3.company.com
Event Type: Error
Event Source: MSExchangeSA
Event Category: (1)
Event ID: 9004
Date: 1/1/2002
Time: 12:00:00 AM
User: N/A
Computer: EXCHANGE1
Description: The Metabase Update service failed to start, error '80040a01'.


---------

When I try and open Admin tools/Domain Controller Security Policy - as described in the resolution - I get " Failed to open Group Policy object. You may not have the appropriate permissions. Details - the system cannot find the path specified"

Any ideas?

Thanks

 

[pagy]

If the domain controller is no longer available for you to run dcpromo on to demote from being a domain controller then you will need to remove the dc from the AD metadata by using ntdsutil

http://www.petri.co.il/delete_failed_dcs_from_ad.htm

Paul

MCSE 2003

"Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe."
Albert Einstein

 

[deisehun]

Thanks Paul - there is an old unavailable DC that is still listed under AD Sites & Services

I think the problem has more to do with the new DC that I gave the FSMO roles to yesterday, not having sufficient permissions or something -

When I try and open Admin tools/Domain Controller Security Policy - as described in the resolution - I get " Failed to open Group Policy object. You may not have the appropriate permissions. Details - the system cannot find the path specified"


Any ideas?