Server 2012 R2 Remove a Failed Domain Controller

[Seeking_Technology]

Hello.

If this is in the wrong forum, please move.

I inherited a legacy network. Server 2012 R2 function level with three domain controllers: DC01, DC02 and DC03.



Background:

DC01 is a physical server.

DC02 and DC03 are VMWARE 6.5 VM Servers.

DC01 is the Primary, DC02 and DC03 are Secondary.

From desktops and other servers ‘echo %logonserver%’ is DC01

From desktops and other servers ‘nltest /dclist:mydomain.com’ shows DCO1, DC02 and DC03, with DC01 as Primary.



Issue:

DC01 is physically up.

DC02 and DC03 are down.

For down DC03, from DC01 Active Directory Users and Computers, Active Directory Sites and Services, and ntdsutil, metadata cleanup, remove selected server DC03 I was able to remove DC03. Perfect!

For down DC02, from DC01 Active Directory Users and Computers, Active Directory Sites and Services, and ntdsutil I was NOT able to remove DC02.



Problem:

DC02 is not logon’able, unable to log onto it

DC02 is in DNS and AC U&C

With AD U&C, S&S and ntdsutil DC02 is shown as a DC with a ‘GC’ but can not right click delete. ntdsutil is unable to reach with RDC and ‘not available’ messages. Google this, not solutions.



Help:

I need to remove the damaged DC02, to stabilize this network I created a new Domain Controller DC04 and works perfect:

- Can’t Login to DC02

- Can’t remove DC02 from Active Tools (Permission Error, Google and no solution)

- Can’t remove DC02 from ntdsutil

I am looking for advanced advice.

Thanks!

~B






Thank you Bruce

Continue reading...