A. With Windows Server 2003 and Windows 2000, if you just delete a dead DC that couldn't be properly demoted, you had to launch ntdsutil (among other utilities) and manually remove metadata from various areas. With the Windows Server 2008 Active Directory Users and Computers MMC snap-in, the metadata is automatically cleaned up if you delete a DC and check the "This Domain Controller is permanently offline and can no longer be demoted using the Active Directory Domain Services Installation Wizard (DCPROMO)" option, shown here. This means all you have to do is delete the DC in Active Directory's Users and Computers—there's no need to launch ntdsutil.
- How can I remove all DNS records for a domain controller (DC)?
- Q. How do you remove a read-only domain controller (RODC) from an environment that's been compromised?
- (Windows 2000)How do I remove a nonexistent domain controller?
- (Windows 2000)How do I remove a nonexistent domain from Active Directory?
Check out hundreds more useful Q&As like this in John Savill's FAQ for Windows. Also, watch instructional videos made by John at ITTV.net.