How to remove PC's from Domain

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello,

I hope I can explain this well.

I need to reformat my server which is a domain controller and I have a few
XP boxes I want to be able to log into after I reformat the Server.

How can I get the pc's to return to a state that they were before I joined
them to the domain.

I don't want to have to reformat the XP boxes too? Way too many apps on them.

Please help
Thank you
Joe
 
Joe said:
Hello,

I hope I can explain this well.

I need to reformat my server which is a domain controller and I have a few
XP boxes I want to be able to log into after I reformat the Server.
Click to expand...

If this is you only DC then you will lose your Domain unless
you have a backup and later restore it (System State backup.)

Most people who THINK they need to reformat their DC really
don't.

What is your real goal? Maybe we can help with that...
How can I get the pc's to return to a state that they were before I joined
them to the domain.
Click to expand...

You will need either another DC (another server you can promote before
destroying this one) OR you will need to backup/restore System State OR
you will need to find another way to reach your real goal (instead of doing
the format) OR you will have to recreate all of the user and computer
accounts after reformatting and creating a NEW domain.
I don't want to have to reformat the XP boxes too? Way too many apps on
Click to expand...
them.

That would not be the case anyway. The machines can join
a new domain without being reformatted -- so even if you
(choose) to destroy the last DC and thus the domain, you
can still join them to the "new" domain.

Unless you have a deep seated virus the reformat is seldom the
best option.

If you have that, you may not even be able to trust any new DC
you promote NOR the current machines (since the virus could
be the current Admin of your domain!)
 
Hello Herb,
Thank you for your reply,

Yes this is my only domain and I had terrible problems with it.
I have reformatted it already and I am just about done. However I got into
this situation from SP1.

Thank you
Joe

Herb Martin said:
Joe said:
Hello,

I hope I can explain this well.

I need to reformat my server which is a domain controller and I have a few
XP boxes I want to be able to log into after I reformat the Server.
Click to expand...

If this is you only DC then you will lose your Domain unless
you have a backup and later restore it (System State backup.)

Most people who THINK they need to reformat their DC really
don't.

What is your real goal? Maybe we can help with that...
How can I get the pc's to return to a state that they were before I joined
them to the domain.
Click to expand...

You will need either another DC (another server you can promote before
destroying this one) OR you will need to backup/restore System State OR
you will need to find another way to reach your real goal (instead of doing
the format) OR you will have to recreate all of the user and computer
accounts after reformatting and creating a NEW domain.
I don't want to have to reformat the XP boxes too? Way too many apps on
Click to expand...
them.

That would not be the case anyway. The machines can join
a new domain without being reformatted -- so even if you
(choose) to destroy the last DC and thus the domain, you
can still join them to the "new" domain.

Unless you have a deep seated virus the reformat is seldom the
best option.

If you have that, you may not even be able to trust any new DC
you promote NOR the current machines (since the virus could
be the current Admin of your domain!)

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Click to expand...
 
Joe said:
Hello Herb,
Thank you for your reply,

Yes this is my only domain and I had terrible problems with it.
Click to expand...

Domain CONTROLLER?
I have reformatted it already and I am just about done. However I got into
this situation from SP1.
Click to expand...

SP1 of Win2000? That is pretty much worthless these days.

You really need SP4+ on it.

Also note, before 'reformatting' a DC (or most any Windows
machine) it is almost always worth doing a "Repair Install".

Even if that fails, the disk doesn't need reformatting, just
re-install if you give up on the OS.

There isn't much any other way to say this, but it sounds like
you are flailing around which is fairly common when someone
does understand the actual problem or doesn't know the repair
or troubleshooting options.

We are happy to help you here (and elsewhere) but we really
need the precise symptoms, sometimes even the actual words
on the error message.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Thank you
Joe

Herb Martin said:
Joe said:
Hello,

I hope I can explain this well.

I need to reformat my server which is a domain controller and I have a few
XP boxes I want to be able to log into after I reformat the Server.
Click to expand...

If this is you only DC then you will lose your Domain unless
you have a backup and later restore it (System State backup.)

Most people who THINK they need to reformat their DC really
don't.

What is your real goal? Maybe we can help with that...
How can I get the pc's to return to a state that they were before I joined
them to the domain.
Click to expand...

You will need either another DC (another server you can promote before
destroying this one) OR you will need to backup/restore System State OR
you will need to find another way to reach your real goal (instead of doing
the format) OR you will have to recreate all of the user and computer
accounts after reformatting and creating a NEW domain.
I don't want to have to reformat the XP boxes too? Way too many apps
Click to expand...
on
them.

That would not be the case anyway. The machines can join
a new domain without being reformatted -- so even if you
(choose) to destroy the last DC and thus the domain, you
can still join them to the "new" domain.

Unless you have a deep seated virus the reformat is seldom the
best option.

If you have that, you may not even be able to trust any new DC
you promote NOR the current machines (since the virus could
be the current Admin of your domain!)

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Click to expand...
Click to expand...
 
I need to reformat my server which is a domain controller and I have a few
XP boxes I want to be able to log into after I reformat the Server.
Click to expand...

Make sure you have a local account on the system and you know the
password. Preferably the Administrator account. Log into the local
system and not the domain.
How can I get the pc's to return to a state that they were before I joined
them to the domain.
Click to expand...

You may not be able to. But you can remove them from the domain.
Control Panel -> System -> Computer Name tab -> Change button. Change
them to a workgroup, when you have a new DC do the same only join the
domain.
I don't want to have to reformat the XP boxes too? Way too many apps on them.
Click to expand...

You don't need to remove them from the domain to accomplish this.

Jeff
 
Herb and Jeff,

Thank you for your kindness here.
I have failed to tell you the entire problem. I didn't think it was necessary?

Herb as for SP1 I was refering to Server 2003 SP1(sorry my fault) after I
installed this I had more than my hands full. I had a guy by the name of John
Stanley from MS on the phone for about 2 hours and a long case number that
didn't help.

The problem was I was losing a hardrive on a RAID 5 setup every 2 days and
sometimes 1 day. Ok. think it was the hardware? Well, I replaced all cables
and 2 of the complaining HD's Still failed after 2 days. Then on the DC I
kept getting errors
1030 and 1058 GPO access denied. I lost my mind on this one.

Well I posted in the AD news group "errors from hell" guess no one liked
that cuz I got no reply for a week and I can't wait that long. However, still
no one has replied to that post.
I went through ALL the KB's to resolve this and called MS for the hotfix.
Spent time on Eventid.net and tried their solutions.... No good same crap. I
also rebound the 2 nics and added my DC IP to the host file. You name it. I
tried it. So... yes I am flaling around now (was).

FYI for all of us I removed the SP1 and the HD's never failed again. I got
two new HD's though = )

Still had a bunch of errors though 1030 and 1058 This was bad.

Jeff, Thanks I do appreciate the help here I have made notes on this from
you and I did remove the PC's that way but I couldn't keep the settings as
you indicated.
I had a long long night with servers and PC reformating.

Herb, you are great also I am sorry for the long post this is why I didn't
write it in the first place. I am all Clean now and running stronG!

Thank you very much guys
Joe
 
Herb and Jeff,

Thank you for your kindness here.
I have failed to tell you the entire problem. I didn't think it was necessary?

Herb as for SP1 I was refering to Server 2003 SP1(sorry my fault) after I
installed this I had more than my hands full. I had a guy by the name of John
Stanley from MS on the phone for about 2 hours and a long case number that
didn't help.

The problem was I was losing a hardrive on a RAID 5 setup every 2 days and
sometimes 1 day. Ok. think it was the hardware? Well, I replaced all cables
and 2 of the complaining HD's Still failed after 2 days. Then on the DC I
kept getting errors
1030 and 1058 GPO access denied. I lost my mind on this one.

Well I posted in the AD news group "errors from hell" guess no one liked
that cuz I got no reply for a week and I can't wait that long. However, still
no one has replied to that post.
I went through ALL the KB's to resolve this and called MS for the hotfix.
Spent time on Eventid.net and tried their solutions.... No good same crap. I
also rebound the 2 nics and added my DC IP to the host file. You name it. I
tried it. So... yes I am flaling around now (was).

FYI for all of us I removed the SP1 and the HD's never failed again. I got
two new HD's though = )

Still had a bunch of errors though 1030 and 1058 This was bad.

Jeff, Thanks I do appreciate the help here I have made notes on this from
you and I did remove the PC's that way but I couldn't keep the settings as
you indicated.
I had a long long night with servers and PC reformating.

Herb, you are great also I am sorry for the long post this is why I didn't
write it in the first place. I am all Clean now and running stronG!

Thank you very much guys
Joe


Herb Martin said:
Joe said:
Hello Herb,
Thank you for your reply,

Yes this is my only domain and I had terrible problems with it.
Click to expand...

Domain CONTROLLER?
I have reformatted it already and I am just about done. However I got into
this situation from SP1.
Click to expand...

SP1 of Win2000? That is pretty much worthless these days.

You really need SP4+ on it.

Also note, before 'reformatting' a DC (or most any Windows
machine) it is almost always worth doing a "Repair Install".

Even if that fails, the disk doesn't need reformatting, just
re-install if you give up on the OS.

There isn't much any other way to say this, but it sounds like
you are flailing around which is fairly common when someone
does understand the actual problem or doesn't know the repair
or troubleshooting options.

We are happy to help you here (and elsewhere) but we really
need the precise symptoms, sometimes even the actual words
on the error message.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Thank you
Joe

Herb Martin said:
Hello,

I hope I can explain this well.

I need to reformat my server which is a domain controller and I have a few
XP boxes I want to be able to log into after I reformat the Server.

If this is you only DC then you will lose your Domain unless
you have a backup and later restore it (System State backup.)

Most people who THINK they need to reformat their DC really
don't.

What is your real goal? Maybe we can help with that...

How can I get the pc's to return to a state that they were before I
joined
them to the domain.

You will need either another DC (another server you can promote before
destroying this one) OR you will need to backup/restore System State OR
you will need to find another way to reach your real goal (instead of doing
the format) OR you will have to recreate all of the user and computer
accounts after reformatting and creating a NEW domain.

I don't want to have to reformat the XP boxes too? Way too many apps on
them.

That would not be the case anyway. The machines can join
a new domain without being reformatted -- so even if you
(choose) to destroy the last DC and thus the domain, you
can still join them to the "new" domain.

Unless you have a deep seated virus the reformat is seldom the
best option.

If you have that, you may not even be able to trust any new DC
you promote NOR the current machines (since the virus could
be the current Admin of your domain!)

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Click to expand...
Click to expand...
Click to expand...
 
Jeff, Thanks I do appreciate the help here I have made notes on this from
you and I did remove the PC's that way but I couldn't keep the settings as
you indicated.
I had a long long night with servers and PC reformating.
Click to expand...

Couldn't keep *what* settings? The user profile will be different
when you're outside the domain, but you can copy the profile from the
local copy to the new profile you're using when you're removed from
the domain. There is (was) no need to reformat a PC in this case.

Jeff
 
Herb and Jeff,
Thank you for your kindness here.
I have failed to tell you the entire problem. I didn't think it was necessary?

Herb as for SP1 I was referring to Server 2003 SP1(sorry my fault) after I
installed this I had more than my hands full. I had a guy by the name of John
Stanley from MS on the phone for about 2 hours and a long case number that
didn't help.
Click to expand...

If you have posted in ....windows.server.dns then that would have been
a good guess but this post is in win2000.dns. said:
The problem was I was losing a hardrive on a RAID 5 setup every 2 days and
sometimes 1 day. Ok. think it was the hardware? Well, I replaced all cables
and 2 of the complaining HD's Still failed after 2 days. Then on the DC I
kept getting errors
1030 and 1058 GPO access denied. I lost my mind on this one.

Well I posted in the AD news group "errors from hell" guess no one liked
that cuz I got no reply for a week and I can't wait that long. However, still
no one has replied to that post.
Click to expand...

Usually a more descriptive title will you get you more or better
responses. It's odd that I missed it though - I think the MS folks
monitor the newsgroups and pick off anything that goes unanswered
for more than two days. (But I am not sure.)
I went through ALL the KB's to resolve this and called MS for the hotfix.
Spent time on Eventid.net and tried their solutions.... No good same crap. I
also rebound the 2 nics and added my DC IP to the host file. You name it. I
tried it. So... yes I am flaling around now (was).
Click to expand...

We can help better if you give us the exact problem (not "same crap" etc.)
FYI for all of us I removed the SP1 and the HD's never failed again. I got
two new HD's though = )
Click to expand...

I have never heard of an SP ruining the hard drive.

Do you have a SCSI controller? Was that driver in the
upgrade?
Still had a bunch of errors though 1030 and 1058 This was bad.

Jeff, Thanks I do appreciate the help here I have made notes on this from
you and I did remove the PC's that way but I couldn't keep the settings as
you indicated.
I had a long long night with servers and PC reformatting.

Herb, you are great also I am sorry for the long post this is why I didn't
write it in the first place. I am all Clean now and running stronG!
Click to expand...

Cool. Let us know if we can help. I prefer posts here on the group
but if you don't get an answer you can always contact me direct and
if I know and have time I will try to help.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

Joe said:
Thank you very much guys
Joe


Herb Martin said:
Joe said:
Hello Herb,
Thank you for your reply,

Yes this is my only domain and I had terrible problems with it.
Click to expand...

Domain CONTROLLER?
I have reformatted it already and I am just about done. However I got into
this situation from SP1.
Click to expand...

SP1 of Win2000? That is pretty much worthless these days.

You really need SP4+ on it.

Also note, before 'reformatting' a DC (or most any Windows
machine) it is almost always worth doing a "Repair Install".

Even if that fails, the disk doesn't need reformatting, just
re-install if you give up on the OS.

There isn't much any other way to say this, but it sounds like
you are flailing around which is fairly common when someone
does understand the actual problem or doesn't know the repair
or troubleshooting options.

We are happy to help you here (and elsewhere) but we really
need the precise symptoms, sometimes even the actual words
on the error message.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Thank you
Joe

:

Hello,

I hope I can explain this well.

I need to reformat my server which is a domain controller and I
Click to expand...
have a
few
XP boxes I want to be able to log into after I reformat the Server.

If this is you only DC then you will lose your Domain unless
you have a backup and later restore it (System State backup.)

Most people who THINK they need to reformat their DC really
don't.

What is your real goal? Maybe we can help with that...

How can I get the pc's to return to a state that they were before I
joined
them to the domain.

You will need either another DC (another server you can promote before
destroying this one) OR you will need to backup/restore System State OR
you will need to find another way to reach your real goal (instead
Click to expand...
of
doing
the format) OR you will have to recreate all of the user and computer
accounts after reformatting and creating a NEW domain.

I don't want to have to reformat the XP boxes too? Way too many
Click to expand...
apps
on
them.

That would not be the case anyway. The machines can join
a new domain without being reformatted -- so even if you
(choose) to destroy the last DC and thus the domain, you
can still join them to the "new" domain.

Unless you have a deep seated virus the reformat is seldom the
best option.

If you have that, you may not even be able to trust any new DC
you promote NOR the current machines (since the virus could
be the current Admin of your domain!)

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Click to expand...
Click to expand...
Click to expand...
 
Well I guess I Screwed up.
I will add this to my notes.

I was reffering to the frofile when I said settings

thank you
Joe
 
Joe said:
If you don't screw up, you never learn anything worthwhile. :)

You are so right!

Thank you for the help I am going to look for the Profile issue.
Thank you for looking =+)
Click to expand...

Not sure if Joe will check back, but as for recovering the DC, Herb's
suggestion to restore the system state from a backup on the new rebuild will
bring the DC back up without losing anything, this way the profiles won't be
toasted.

Also, as for the 1030 and 1058 errors, I had a similar prob at a client's
site. After messing around and testing it, I've found that on Win2000 PCs,
the computer account can be anywhere in the domain for a user's GPO to work,
but found out XP Pro PCs need to have the computer account in the same OU or
under it for the user GPOs to work. Don't know why, but when we moved the
PCs into the user's OU (or in a child of it), the GPOs ran and the errors
disappeared.

FYI: I was using GPMC to troubleshoot, specifically RSOP and the Modeling
wizards and reports, as well as the Event logs within it. Nice tool!

--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Paramount: What's up with taking Enterprise off the air??
Infinite Diversities in Infinite Combinations.
=================================
 
Ace this is awesome!

Thank you I have printed this for my notes.

I have to ask please if I could. What is the OU? I saw this before but was
unable to find out what the acronym was.

I have never used system state either any direction on this?
I wouldn't mind learning a little more here so I can refer to this later.

Thank you again
Joe
 
I have to ask please if I could. What is the OU? I saw this before but was
unable to find out what the acronym was.
Click to expand...

Organizational Unit

An OU is a container within an Active Directory domain.

For a first understanding think of it as the collection of
users and computers in a DEPARTMENT of a company.

OU's can be used for many other things but this idea of
a department gets you close to the concept if you don't
fixate on it and overlook other opportunities to use OUs.
e.g., employee types (consultants, contractors, secretaries,)
locations (but many times we use Sites for this), mirror
former domains (from NT etc.), project teams (semi-permanent
etc.)

Remember these key points on deciding if you need an OU:

1) Delegate authority (over a portion of the domain)

2) Link Group Policy (to a subset of the domain)

Other reasons exist -- like "mirror NT domains" or "hide
objects" (so you don't have to look at them) but they
almost always come down to the two KEY points also.


--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
 
Joe said:
Ace this is awesome!

Thank you I have printed this for my notes.

I have to ask please if I could. What is the OU? I saw this before
but was unable to find out what the acronym was.

I have never used system state either any direction on this?
I wouldn't mind learning a little more here so I can refer to this
later.

Thank you again
Joe
Click to expand...

My pleasure. Herb summed up an OU.

May I suggest attending an AD class? You can learn much in a 5 day Microsoft
Official Curriculum (MOC) course. Many hands on labs so you can see exactly
how it works!

This course covers (among many other things), Windows 2003 AD, DNS, OUs,
GPOs and disaster recovery:
http://www.microsoft.com/learning/syllabi/2279Afinal.asp

The older Windows 2000 version:
http://www.microsoft.com/learning/syllabi/2154BFinal.asp

Ace
 
Back
Top