Announcement

Collapse
No announcement yet.

Cannot delete old DC computer object from AD

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Cannot delete old DC computer object from AD

    So I demoted a DC succesfully as it is not registered as DC anymore.
    Nor is it available in the network as it has been re-installed with a fresh OS and a new name.
    But under the container Computers I can still see the server.
    When I try to delete it, Windows tells me that it is "a container and conains other objects. Are you sure you want to delete object SERVER001 and the objects it contains? This operation could take a long time if SERVER001 contains a large number of objects"...
    When answering with Yes, it says "Access Denied".
    On this moment I am logged in as Domain Admin, member of Enterprise Admins.

    So what is preventing me from deleting this object?
    Is there still some leftovers in AD to clean? As I tried Metadata cleanup, it cannot select the SERVER001 as it is allready deleted by succesfully demoting the DC.

    Any ideas?

  • #2
    Re: Cannot delete old DC computer object from AD

    In ADUC click View and select Users, Groups, and Computers as containers and see what that server's object contains. Also check the permissions to see if you have enough to delete the object(s).
    Regards,
    Jeremy

    Network Consultant/Engineer
    Baltimore - Washington area and beyond
    www.gma-cpa.com

    Comment


    • #3
      Re: Cannot delete old DC computer object from AD

      Yes, that solves it!
      After selecting to view with advanced features, I was able to see the permissions.
      And I saw that any type of administrator didn't have full control.
      Thanks!

      Comment


      • #4
        Re: Cannot delete old DC computer object from AD

        Glad to help.
        Regards,
        Jeremy

        Network Consultant/Engineer
        Baltimore - Washington area and beyond
        www.gma-cpa.com

        Comment

        Working...
        X