Delete Failed DCs from Active Directory

I recently had one of my domain controllers die on me, and I don’t have time to fix the issues with it. It was coursing my network issues because I kept getting replication errors and I couldn’t remove the server with DCpromo because I couldn’t boot the server. So I had to force remove the Domain Controller from Activate Directory. Here’s a small guide how it did it for anyone else with this issue 🙂

1. Open a Command Prompt (Administrator Access), type Ntdsutil and press ENTER
2. At the Ntdsutil: prompt, type metadata cleanup and press ENTER.
3. At the metadata cleanup: prompt, type connections and press ENTER.
4. At the server connections: prompt, type connect to server <servername>, where <servername> is the domain controller (any functional domain controller in the same domain) from which you plan to clean up the metadata of the failed domain controller. Press ENTER.
5. Type q and press ENTER to return you to the metadata cleanup: prompt.
6. Type select operation target and press ENTER.
7. Type list domains and press ENTER. This lists all domains in the forest with a number associated with each.
8. Type select domain <number>, where <number> is the number corresponding to the domain in which the failed server was located. Press ENTER.
9. Type list sites and press ENTER.
10. Type select site <number>, where <number> refers to the number of the site in which the domain controller was a member. Press ENTER.
11. Type list servers in site and press ENTER. This will list all servers in that site with a corresponding number.
12. Type select server <number> and press ENTER, where <number> refers to the domain controller to be removed.
13. Type q and press ENTER. The Metadata cleanup menu is displayed.
14. Type remove selected server and press ENTER. – You will receive a warning message, read it and if you agree press Yes.
15. Close Command prompt as this is not needed any more.
16. In Active Directory Sites and Services, expand the appropriate site.
17. Delete the server object associated with the failed domain controller.
18. In Active Directory Users and Computers, expand the domain controllers container.
19. Check if the computer object associated with the failed domain controller has been deleted if not delete it.
20. In DNS, expand all the options and check that the failed domain controller is not in any of the menus.

Hope this helps someone 🙂

Leave a Reply