How to Remove an Orphan Domain Controller

Domain computers are part of a Windows network.

Domain controllers are machines running Microsoft Windows that host the security, permission, users and computers configured on the network. Before users can log into the domain, their user names and passwords are authenticated on the domain controller. Administrators occasionally upgrade the server machine and transfer domain control to a new machine, but sometimes an orphaned machine is not fully removed due to corruption during the process. The domain computer can be forcibly removed using the "dcpromo" command.

Instructions

1. Click the Windows Start button and select "Run." In the text box that pops up, enter "dcpromo /forceremoval" and press the "OK" button. This starts the domain controller removal wizard.

2. Click the "Next" button at the opening screen. Click "Next" at the following screen that warns you about Active Directory (AD). AD is removed from the domain controller when it is removed from the network.

3. Enter the administrator password in the next window. The domain administrator password is required when removing a domain controller from the network. Click the "Next" button.

4. Click the "Finish" button at the summary screen. At this point, the domain controller is removed from the network. Click the "Restart" button when prompted. The server no longer serves as a domain controller on the network.

References

• Petri: Forcibly Removing Active Directory from a DC -- Retire a Domain Controller