You may remember my saga a while ago with AD not replicating.

We have now decided to remove the dc status of the server that has an out of date copy (very) of the AD.

I tried to use dcpromo with the server at its original location but I got an error. I have now moved the server to another location that has direct no firewalled access to the other DC's and am now trying DCPROMO again, but its not working. How can I force this box a member server again, without using dcpromo.

Hi, Manny,

There's a Microsoft article about that -see here -http://support.microsoft.com/default.aspx?scid=kb;en-us;332199

HTH, Phil

Managed to remove AD from the Domain Controller by using a little known command line option to dcpromo which is /forceremove . That does a rather messy removal of AD, then you need to use ntdsutil from another DC to manually remove the DC entries from AD. Once that was done it was just a case of adding the server back onto the domain as a member server.

I'll redo AD at a later date once we have replaced our current firewall which was the cause of the trouble to begin with.

Managed to remove AD from the Domain Controller by using a little known command line option to dcpromo which is /forceremove . That does a rather messy removal of AD' date=' then you need to use ntdsutil from another DC to manually remove the DC entries from AD. Once that was done it was just a case of adding the server back onto the domain as a member server.

I'll redo AD at a later date once we have replaced our current firewall which was the cause of the trouble to begin with.[/quote']

Ive just realised we had a similar problem.. one of the DC's wasnt replicating properly and screwing up everything else... turned out to be there was a VPN client that had been started on it.. one that doesnt support LDAP.

took ages to figure that one out lol