Remove RANGER from demoted DC

[josephsrc]

We have recently upgraded our network with new W2K8 servers which we have used DCPROMO to upgrade our AD to the new DC's. Unfortunately we had Ranger installed on one of our W2K3 DC's which has now been demoted, and to uninstall it it goes through the installation process and wants the server to be a DC.

 

Please can someone help us remove Ranger Server from our server?

 

Any help would be gratefully appreciated.

Thanks

[m25man]

If its still installed on the same 2003 server you will need to promote it back uninstall it and demote it again.

 

Have you ditched it entirely? If so what about the clients?

You need to keep a Ranger server up and running until you have removed it from everywhere.

Then remove the server service and demote...

 

If you have already removed all of the clients (or reimaged them) and the demoted server is needed to be kept intact for other reasons then Im afraid its a manual cleanup.

Stop and disable all of the Ranger Services.

Delete the service accounts

Remove all registry key entries and startup references to Ranger.

 

A bit messy but quite achievable, Ranger never messed with AD like RM does so its quite possible to clean it up without a rebuild.

Unfortunately thats not quite as easy for the clients.

 

Im pretty certain there was a way to log on locally and invoke a clean up of the client but its a manual process and not something you want to do 300 times!

Thats why you need to use RangerRemove on all of your clients before trashing the server!

[josephsrc]

Thanks for the info, yes we have removed all client machines using rangerremove. We are very against reinstalling the server as a DC, it looks like a manual tidy up then.

 

Any details on where to look in regedit and any "hidden" services or files it may have installed would be apprieciated.

 

Thanks

[m25man]

HKLM\Software\Sentinel Products

 

HKLM\Software\Microsoft\Windows\Current Version\Run - Remove the Lan Ranger startup entry.

 

FCM and FRS services and the usual service accounts.

 

That all I can think of at the moment.