dead dc removal

[irsprint84]

I ve had a dc completely die on me so how do I manually removew it from the domain cleanly?

It only had dns and global catalogue on it

[Domino]

use the procedure here: How to remove data in Active Directory after an unsuccessful domain controller demotion

It's not too tricky, but make sure you double check each step as you do it.

[irsprint84]

it wasnt unsuccessfully demoted it was still active so will this work?

also will this work for 2008 r2?

[Domino]

it wasnt unsuccessfully demoted it was still active so will this work?

also will this work for 2008 r2?

Yes and yes, although this petri guide might be easier to follow: Delete Failed DCs from Active Directory

[Dos_Box]

Well, you should move the DNS and GC role to a new server for starters (seize the GC role on the new server using NTDSUTIL if you have too). Then follow Dominos advice.
Incendentally, how many DC's do you have?

[irsprint84]

Sadly XEN server has killed my Domain controller, I wont even be able to access it! I have 2 other dc's, 1 is the main with all roles, etc.. also I have a second one with dns ad gc on it but its on this stupid XEN server with issues so as soon as I shut it down it wont come back again so whats my best bet here? going to lose 2 dcs

*edit* the main one with all the roles is a physical box else where. So in theory I need to destroy both dc's on the XEN server without being able to demote either or get rid of DNS on them so whats the bets thing to do?

[irsprint84]

Does removing DNS cause server to reboot?

[Domino]

Does removing DNS cause server to reboot?

Yes it will need a reboot to remove the roles.

I'd dcdemote the one you can still access, that way when you lose it, the domain info should already be removed. Then manually remove the other. and rebuild them later

[irsprint84]

Excellent thanks, with dns still being on those older servers do I need to remove anything else? just references in the ok server DNS?

[Domino]

From above:

To remove the failed server object from DNS

In the DNS snap-in, expand the zone that is related to the domain from where the server has been removed.
Remove the CNAME record in the _msdcs.root domain of forest zone in DNS. You should also delete the HOSTNAME and other DNS records.


If you have reverse lookup zones, also remove the server from these zones.

Should do ya ;-)

You might also need to remove NTDS references from Sites and Services

[irsprint84]

Thanks for that looks like a fun packed evening for me!

Just creating a another DC for spare with it being GCSE tomorrow

[SYNACK]

This is one area where having a 2008 R2 enviroment is really helpful as so long as you have removed the role and operations masters from the failed DC you can just delete if from ADUC like any other station and it will do all the clean up for you. Way easier than when using 2003.

[irsprint84]

one was a 2003 dc and other 2008 r2

[irsprint84]

Worked a treat, thanks thats why boys and girls dont use the dc for other services

[DSapseid]

To revive an old thread. I had 3 dc's and 2 of them have died when the storage holding their virtual hdds died (long story)!! The one remaining DC has all 5 roles and is working ok. Can i just follow the Petri link above to the letter and remove them without problems then just create 2 new ones and dcpromo them up.

Never had to play with multiple DC's before and want to make sure im not going to kill AD!!