Domain Controller Demotion

If you need to demote a Windows 2000 domain controller (DC) that's missing its DNS suffix, first read the Microsoft article "HOW TO: Remove Data in Active Directory After an Unsuccessful Domain Controller Demotion" (http://support.microsoft.com/?kbid=216498). Then, reboot your server and press F8 to access the startup options. Select Disaster Recovery Mode and log on to the server. Create a local administrator account with a blank password (all previous local accounts were deleted when the server was promoted). Start regedt32.exe and go to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions registry subkey. In the right-hand pane, double-click ProductType. Change the value from LanmanNT to ServerNT (the value is case sensitive).

Reboot the server again and use the new local administrator account to log on. Delete the NTDS folder. Follow the Microsoft article's instructions to delete the server's computer account from the Active Directory (AD) domain. This action demotes the DC to a regular server. Reboot the server and log on as administrator. Select the Change primary DNS suffix when domain membership changes check box. (You can find this setting under the Control Panel System applet's Change, More tabs.) You can now run Dcpromo to promote the DC.

Please or Register to post comments.

IT/Dev Connections

Las Vegas
September 30th - October 4th

Paul ThurottYou'll have the opportunity to experience:
• The Microsoft
Technology Roadmap
• Office 365 Implementation
• Hyper-V Optimizing
• Windows 8 Deployment
and much more!

Come See Paul Thurrott & Rod Trent in Person!

Early Registration Now Open

Upcoming Training

Mastering System Center 2012

During over 6 hours of training you can join John Savill from your computer as he will walk you through the key components and capabilities of System Center 2012, what’s involved in using the components, and the benefit they can bring to your environment.

Register Now

Current Issue

May 2013 - The NameTranslate object is useful when you need to translate Active Directory object names between different formats, but it's awkward to use from PowerShell. Here's a PowerShell script that eliminates the awkwardness.

CURRENT ISSUE / ARCHIVE / SUBSCRIBE

Windows Forums

Get answers to questions, share tips, and engage with the Windows Community in our Forums.