Announcement

Collapse
No announcement yet.

Ok to delete old DCs from Sites and Services

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Ok to delete old DCs from Sites and Services

    Hi all

    Basically we had two DCS - London and Paris (Windows 2000 Server). Demoted one, formatted, installed Windows Server 2003, promoted, moved roles, DNS etc... This became Dublin.

    Did the same to the other, this became Berlin. Well all is working okish. We seem to get new clients (built with RIS) that say they recieved GP info from the old DCs but a GP Update solves that - still odd though.

    Can these old DCs be deleted from AD Sites and Services? See attached picture.

    Thanks in advance.
    Attached Files
    Server 2000 MCP
    Development: ASP, ASP.Net, PHP, VB, VB.Net, MySQL, MSSQL - Check out my blog http://tonyyeb.blogspot.com

    ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

  • #2
    Re: Ok to delete old DCs from Sites and Services

    Please review:

    http://www.petri.com/delete_failed_dcs_from_ad.htm

    Regards,

    Yuval
    Best Regards,

    Yuval Sinay

    LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14

    Comment


    • #3
      Re: Ok to delete old DCs from Sites and Services

      I didn't realise that these had failed to demote??? It doesn't show in the AD DC Container... only in sites and services.. how can i check that i need to do the first part of the steps i.e. check that th demotion has failed?

      Even if it hasn't failed will it cause a problem running these steps? Bearing in mind that one of the old domain controllers was demoted (Paris) but then formatted and just became a 2003 file server with the same name (Paris) - i know thats not what i said in my first post but it was late! Will that cause a problem?

      Thanks
      Last edited by tonyyeb; 28th August 2005, 21:29.
      Server 2000 MCP
      Development: ASP, ASP.Net, PHP, VB, VB.Net, MySQL, MSSQL - Check out my blog http://tonyyeb.blogspot.com

      ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

      Comment


      • #4
        Re: Ok to delete old DCs from Sites and Services

        Mmmm you may have problem if the "Paris" computer own the same SID of the old "Paris" DC. In this case you should backup all the settings and files, follow the instrcutions above. You may need to re-add the "Paris" server and reset all the share/NTFS permissions.

        Regards,

        Yuval
        Best Regards,

        Yuval Sinay

        LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14

        Comment


        • #5
          Re: Ok to delete old DCs from Sites and Services

          Doesn't look serious. Do the entire metadata cleanup (but leave the computer account alone) and you should be fine.

          > You may need to re-add the "Paris" server and reset all the share/NTFS permissions.

          Care to explain? I'm not sure I agree with this...

          Comment


          • #6
            Re: Ok to delete old DCs from Sites and Services

            I ran through this the other week on a server that had failed dcpromo.

            The article was spot on and i've had no probs accessing the server since the cleanup.

            Comment


            • #7
              Re: Ok to delete old DCs from Sites and Services

              I was just about to attempt the metadata cleanup when i noticed that we still have a computer account for LONDON in the Computers Container. Should i delete this? I know the answer is probably yes but when i go to delete it, a message appears saying:
              Attached Files
              Server 2000 MCP
              Development: ASP, ASP.Net, PHP, VB, VB.Net, MySQL, MSSQL - Check out my blog http://tonyyeb.blogspot.com

              ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

              Comment


              • #8
                Re: Ok to delete old DCs from Sites and Services

                Wild guess: LONDON had printers installed and published in AD with default paths, and those printer objects have been created as leaf objects of the server object.
                To be 100% about what you are doing either use adsiedit to examine what kind of child objects the account in question has or in ADU&C check the "View->Users, Groups and Computers as containers"
                Guy Teverovsky
                "Smith & Wesson - the original point and click interface"

                Comment


                • #9
                  Re: Ok to delete old DCs from Sites and Services

                  Here is what is there:

                  I think the problem with the RISed computers is that the image was RIPrepped when the other DCs were available and so that is where that information is coming from. Maybe a registry entry that doesn't get updated immediately.
                  Attached Files
                  Server 2000 MCP
                  Development: ASP, ASP.Net, PHP, VB, VB.Net, MySQL, MSSQL - Check out my blog http://tonyyeb.blogspot.com

                  ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

                  Comment


                  • #10
                    Re: Ok to delete old DCs from Sites and Services

                    I think you are fine to delete this account, its just an account it can be re-created for that machine. You will always get an error similir to that when you delete and object that has an ojbect within it, such as an OU with nested OU's, the question is do you use the objects inside of it?

                    Comment


                    • #11
                      Re: Ok to delete old DCs from Sites and Services

                      Originally posted by tonyyeb
                      Here is what is there:

                      I think the problem with the RISed computers is that the image was RIPrepped when the other DCs were available and so that is where that information is coming from. Maybe a registry entry that doesn't get updated immediately.
                      hmm, possibly GPO tattoo'ing on the RIS image? we have had problems with this before

                      Comment


                      • #12
                        Re: Ok to delete old DCs from Sites and Services

                        Originally posted by simondrake79
                        hmm, possibly GPO tattoo'ing on the RIS image? we have had problems with this before
                        Really Simon? Can you elaborate? It would be helpful...
                        Server 2000 MCP
                        Development: ASP, ASP.Net, PHP, VB, VB.Net, MySQL, MSSQL - Check out my blog http://tonyyeb.blogspot.com

                        ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

                        Comment


                        • #13
                          Re: Ok to delete old DCs from Sites and Services

                          Originally posted by tonyyeb
                          Really Simon? Can you elaborate? It would be helpful...
                          yeah sure.

                          Before, in our company, we would riprep without much concern with what is going on when we realised that some weird things were going on. It turned out that the computer AD object was inheriting policies as well as the logged on user! (very bad for RIS images)

                          This didnt have a huge affect on things at first but it made us more aware of RIS images and their own little quirks.

                          we still find 'legacy' registry entries. these are in place even when we have specifically changed these values and riprep'ed the same image back up.

                          For instance the SetandLockSkin reg entry for Windows Media Player. I changed it to Coporate Skin AGES ago and realised it was poo so i riprep'ed it back up but we still get the same problems...

                          Comment


                          • #14
                            Re: Ok to delete old DCs from Sites and Services

                            Interesting, makes me think of RIS in a different light. The build process makes it look like its a fresh install going on but of course it isnt as why would you need different images for different HALs and hard drive sizes etc!!

                            Thanks for the insight Simon, very helpful!
                            Server 2000 MCP
                            Development: ASP, ASP.Net, PHP, VB, VB.Net, MySQL, MSSQL - Check out my blog http://tonyyeb.blogspot.com

                            ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

                            Comment

                            Working...
                            X