Removing the last DC in a domain with NTDSUTIL

[b166er]

The tech before me did a bad demote on the last DC in this domain so now DCPROMO will not demote, it doesn't see the server as a DC in dcpromo but is still the DC through its network ID.

Anyway, I tried to use the NTDSUTIL to remove it but i get the error message Error 0x2094 The DSA Object cannot be deleted.

I understand that this is because i am connected to the server through NTDS while trying to remove it. The problem is that this is the last DC in the domain, so i can't connect to another in the forest to perform the deletion.

What can I do besides a rebuild?

Thanks in advance,
--JOeR

 

[hewissa]

Have you tried this?

http://support.microsoft.com/?kbid=230306

http://support.microsoft.com/default.aspx?scid=kb;EN-US;216498

Hewissa

MCSE, CCNA, CIW

 

[b166er]

Yes, that is the step-by-step i used. I get the error in step five of that article.

Error 2094. The DSA Object cannot be deleted0x2094

because i am connected to the server through NTDS of which i am trying to delete.

In other words, it won't let me delete the server because i am connected to it...¿

pretty confusing.

The step by step presented in the above article is about as accurate as the aging of fossils.

Thank you encyclopedia brytanica(sp?)
"A fossils age can be determined by the geological strata it is found in"
"A geological strata's age can be determined by the fossils found within them"

Evolution who?

 

[b166er]

Thanks for the reply by the way.

--JoeR

 

[hewissa]

If this is the last DC in the domain, and the attempts you made so far haven't worked....I would guess you have two options:

1: If AD has NOT been removed successfully, if it still exists, can you join a new DC to the old, defunct domain. Move all roles to the "new DC" and then try and use the NTDSUTIL from the new DC to remove the old one. Then dcpromo the new one. Rebuild avoided.

2: Rebuild.

Hewissa

MCSE, CCNA, CIW

 

[BWilson77080]

well you gotta have a operations master role missing somewhere...maybe domain naming master...since its responsible for adding and deleting domains. try to get the role on there by siezing it