any other way to remove AD?

  • Thread starter Thread starter Tony
  • Start date Start date
T

Tony

hi.
is there any othere way to remove active directory from window 2000 server ?
dcpromo is not working in my domain. there has been miss configuration with
DNS and im totaly new to this stuff. just want to get rid of AD ..
please let me know if i can remove this with some other methods..
any help greatly appreciated.
Regads
 
In
Tony said:
hi.
is there any othere way to remove active directory from window 2000
server ? dcpromo is not working in my domain. there has been miss
configuration with DNS and im totaly new to this stuff. just want to
get rid of AD ..
please let me know if i can remove this with some other methods..
any help greatly appreciated.
Regads
Click to expand...

Can you please post an ipconfig /all AND the Domain name from ADU&C?

I need to verify that you are pointing the DC to its own IP address only for
DNS and that you have the correct primary DNS suffix for your AD Domain.
This may be a disjointed names space due to an incorrect primary DNS suffix,
or it could be a Single label Domain name. There is a fix for the latter
two.
 
DNS misconfiguration? That's easy if not familiar with AD/DNS and have not
looked into the documentation or taken any courses on it, which with all due
respect, I highly recommend to everyone if this is the case.

DCPROMO is not working probably for a number of reasons:
**************************************
1. SRV records have not been registered under the zone. This is what dcpromo
is "looking" for when you select a demotion.

2. Possible single label DNS domain name (such as "domain" instead of the
required format of "domain.com"). This will thwart DNS registration with the
latest service pack. Besides, it's not RFC compliant for a domain name since
it doesn't follow the hierachal DNS tree.

3. Registration problems can also occur if you have an incorrect or missing
Primary DNS Suffix on the DC. Netlogon uses that to "find" that zone name in
DNS to register it;s info into. If it is not the same name as the AD DNS
Domain name, then that will cause it too.

4. You are referencing your ISP's DNS servers in your IP properties on the
DC and your clients. This is a no-no in AD. You need to ONLY point to your
own DNS server and it's recommended to use a forwarder for efficient
Internet resolution.
**************************************



Depending on your scenario, you may be able to fix this. There is also a
new update for DCPROMO to allow a switch called "/forceremoval" to be used:
332199 - Using the DCPROMO -FORCEREMOVAL Command to Force the Demotion of
Active Directory Domain Controllers:
http://support.microsoft.com/?id=332199,
But this does NOT fix your original problem. The problem MUST be fixed or
this does not mean anything.



Here's a repost of something I posted the other day for someone else that I
was trying to help with which may/will apply to your scenario. It also
provides some links you can read up on AD's requirements and such:
==================================
First thing I would check and make absolutely sure that you do NOT have any
external DNS servers in all of your machines' IP properties. This is
problematic with AD.

During many domain
communication and functions, the clients and DCs query the DNS server for
the location of domain services and resources, which is what the SRV records
store. If using an ISP's DNS in your IP properties, then numerous numerous
errors will abound, one of which long logon times or cannot logon, will
occur. So what's happening probably is that they maybe trying to query the
external DNS for that domain name's LDAP services, which it does not have an
answer for, so the need to point to your own DNS that's hosting the AD zone
is essential in an AD infrastructure, no matter how small.

So, if using an external DNS or the Netware DNS, they need to be removed and
only use your own internal DNS. To achieve efficient Internet resolution (if
required if not using Proxy), then suggested to configure a forwarder

Here's how to configure a forwarder. If the option is grayed out, delete the
root zone. This will show how:
http://support.microsoft.com/?id=300202

Here's more info on DNS and AD's requirements:
http://support.microsoft.com/?id=291382

Here's an AD and DNS troubleshooting guide:
http://www.microsoft.com/windows2000/dns/tshoot/dns_tshoot2A.asp

How to configure a DC with a single label DNS domain name"
http://support.microsoft.com/?id=300684
(notice this is just a bandaid because XP pro clients will not be able to
use a single label name in a domain and will have numerous problems
accessing domain resources due to this).
======================================


If you like, you can go ahead and get the update for DCPROMO. If you would
like us to help out to fix the current issue, we would first need to see:

1. An unedited ipconfig /all
2. The actual AD DNS domain name (as it shows up in ADUC).
3. The name of the zone in DNS
4. Have you enabled dynamic updates on the zone?

Thanks



--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
thanks for the reply..
Here is system configuration :
Single NIC . with static IP address ( made up one )
after executing Ipconfig/All folloing is the information that is been
supplied.
Host name ....................................... : mycomputer
Primary DNS Suffix ......................... : secondimage.ca
Node type ....................................... : Hybrid
Ip Routing Enabled .......................... : Yes
Wins proxy Enabled ........................ : No
DNS Suffix search list ..................... : secondimage.ca
Ethernet adapter local area connection.
ip address.................................: my static ip address
DHCP enabled ........................: No
DNS servers .............................: same static ip address.
no default gateway .
so this are all the info i have so far. but , im sure there is something is
wrong with DNS , i had to reinstall and recreat the zone files. but stil AD
is not working and boot and login is way too slow.
any help greatly would appreciated, since , i been pulling my hair to learn
and do the exams ..
thanks a lot for helps
 
If you installed SP4 (or maybe even SP2-SP3) then you can run:

DCPRomo /forceremoval
 
In
Tony said:
thanks for the reply..
Here is system configuration :
Single NIC . with static IP address ( made up one )
after executing Ipconfig/All folloing is the information that is been
supplied.
Host name ....................................... : mycomputer
Primary DNS Suffix ......................... : secondimage.ca
Node type ....................................... : Hybrid
Ip Routing Enabled .......................... : Yes
Wins proxy Enabled ........................ : No
DNS Suffix search list ..................... : secondimage.ca
Ethernet adapter local area connection.
ip address.................................: my static ip address
DHCP enabled ........................: No
DNS servers .............................: same static ip address.
no default gateway .
so this are all the info i have so far. but , im sure there is
something is wrong with DNS , i had to reinstall and recreat the zone
files. but stil AD is not working and boot and login is way too slow.
any help greatly would appreciated, since , i been pulling my hair to
learn and do the exams ..
thanks a lot for helps
Click to expand...


You did not include you domain name from ADU&C also if this machine needs
access to the internet it will need a Gateway. The ipconfig looks OK if the
primary DNS suffix matches the domain from ADU&C and you have dynamic
updates set to "Yes" on the AD zone.

Also, verify that the machine only has one NIC
 
Kevin,.. how can i check for domain from ADU&C.?
Thanks
I have installed SP2 ,and SP2 dose not supporet forceremoval switch ..

Thanks
 
Thanks for all you guys help.
for some reason , NetLogon was disabled.. when i turned on the Netlogon
services, everything seems to be working fine.
Again. i do really appreciate all your helps , and i have learned great deal
through this 2 days of losing my hair :o)
Regards
 
In
Tony said:
Thanks for all you guys help.
for some reason , NetLogon was disabled.. when i turned on the
Netlogon services, everything seems to be working fine.
Again. i do really appreciate all your helps , and i have learned
great deal through this 2 days of losing my hair :o)
Regards
Click to expand...


That'll do it for sure.
 
Back
Top