Tag: AD

Remove Active Directory from first Domain Controller in a Windows Server environment

Remove Active Directory from first Domain Controller in a Windows 2003 Server environment Preface Installed two Microsoft Windows 2003 servers as Active Directory domain controllers. The intent is to replace the original two Microsoft Windows 2003 servers as Active Directory domain controllers. One domain controller was relatively easy to remove Active Directory using DCPROMO. The other not so easy. Problem…

Read More »

How to create a local admins group using AD, GPO, VBS in a Microsoft Windows domain

In a Microsoft Windows server domain, in this case a Windows 2003 Server, Windows Server 2003 Enterprise and Windows 2000 Server, Windows 2000 Advanced Server mixed mode environment, there was a need to create a local administrators group, add members to that group, and give those users administrator access to either workstations or servers.  Using a Group Policy Object (GPO),…

Read More »

Remove Windows 200x Domain Controller from AD in DSRMode

Demoting a Domain Controller When Normal Demotion Fails If DCPromo fails to demote a Domain Controller gracefully, you can force the machine to forget it’s a DC by temporarily tricking it into thinking it’s a member server. Step 1 — Modify the product type in the registry Boot into Directory Services Restore Mode (DSRM) and open Regedit. Navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions…

Read More »