How to manually remove AD.

  • Thread starter Thread starter Hale KPETIGO
  • Start date Start date
H

Hale KPETIGO

Hello,

I have deleted my active directory database and I have no back up of
it. In fact I would like to remove the active directory completly but I
am unable to do this because:

1. I can not boot completely w2K as it tells me Directory Services
failed to start... and forces me to boot in safe mode for active
directory recovery
2. In the safe mode I can not use dcpromo to remove active directory as
it want me to boot normaly to remove it.

Does any one have any idea of how I can manually remove the active
directory in safe mode in order to become a stand alone server?

Thank you.

HK

--
_______________________________________________________________________
Halé KPETIGO | SeAL - Online Solutions
http://www.seal-france.com | E: (e-mail address removed)
M: +33.(0)6.89.84.31.24 | T: +33.(0)1.46.34.05.05 | F:
+33.(0)1.46.34.13.14
 
There is a registry change you can make to make it think it is not a DC any
more. I can't find the exact place but maybe someone will post. It is
possible though.

HTH


Paul
 
1. I can not boot completely w2K as it tells me Directory Services
failed to start... and forces me to boot in safe mode for active
directory recovery
2. In the safe mode I can not use dcpromo to remove active directory as
it want me to boot normaly to remove it.

Does any one have any idea of how I can manually remove the active
directory in safe mode in order to become a stand alone server?
Click to expand...

I think the article you are after may be Q332199. Thankfully I havent yet
had the need to use this doc so I have no idea how useful the information
will be to you. Good luck!

HTH

M@
 
If memory serves...
HKLM\System\Current Control Set\Control\Product Options\Product Type\lanman

Change it to servernt

Regards,
/Jimmy
 
I have tried this but unfortunately, it does not work. It tells me I have to
start w2k with AD before using dcpromo.
 
Effective... Well, it takes some cleanup on the other DCs, DNS etc
afterwards... I haven't done it in a long time, but I'll see if I can do it
in the lab tomorrow and post the results.

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------
 
Does any one have any idea of how I can manually remove the active
directory in safe mode in order to become a stand alone server?
Click to expand...
I guess that rebuilding the box from scratch is not an option?

Cheers,

Cliff
 
Jimmy Andersson said:
Effective... Well, it takes some cleanup on the other DCs, DNS etc
afterwards... I haven't done it in a long time, but I'll see if I can do it
in the lab tomorrow and post the results.

Regards,
/Jimmy
Click to expand...

Hi Jimmy,

Just to confirm the relevance of that regkey, here's something someone else
put together in the past (forget who) which I changed slightly, but it's
pretty much intact from the original. It mentions that key, and if the steps
are followed (including the services, etc), it will successfully change the
machine to a non DC.

=================================
13 easy steps.
1) On another DC in the domain run NTDSUTIL to move the FSMO's, er seize
them! DOH. (If this is the only DC, then don't worry about it)
2) Make sure DNS is 100% solid on the working DC. (If only one DC, don't
worry about it for now, but configure it correctly before promoting it to a
new DC).
3) Make sure working DC is also a GC. (If just one DC, don't worry about
it).
4) Boot corrupted DC into DSRM, edit the registry change
HKLM\SYSTEM\CCS\Control\ProductOptions change the ProductType value from
LanmanNT to ServerNT. This key dictates if the machine is a DC or jus a
server. ServerNT means it's not a DC.
5)Command prompt > net stop ntfrs to stop FRS.
6) Delete the Winnt\Sysvol and NTDS directories.
7) Reboot the now former DC
8) Log into the now member server. Change it to a stand alone, by joining a
workgroup (My Computer Properties, Network ID tab, remove it from the old
domain).
9) Reboot the now stand alone server.
10) If there is only one DC in the domain, skip this step, otherwise, on the
good DC delete the disabled computer account for the old, now defunct DC.
11) Now on this new stand alone machine, set the Primary DNS Suffix to the
new domain name that you want (In My Computer. Properties, Network ID Tab,
Properties, More,). Reboot.
12. Make sure that DNS is configured with the new domain name and updates
set to YES.
13. Run DCPROMO to create a new domain or join the domain/tree/forest again.
Reboot.
===================================
 
Hi,

launch regedit, go to hkey local machine > SYSTEM >
ControlSet001 > Control > ProductOptions and change
ProductType from LanmanNT to ServerNT
Cheers,

Tim.
 
Hi Ace,

This was pretty much the same steps I did in the past and was going to do
today. Thanks for saving me time in the lab! :)

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Active Directory
---------- www.qadvice.com ----------


"Ace Fekay [MVP]"
 
Jimmy Andersson said:
Hi Ace,

This was pretty much the same steps I did in the past and was going to do
today. Thanks for saving me time in the lab! :)

Regards,
/Jimmy
--
Click to expand...


There ya go!

Cheers!
 
Back
Top