dear all,

i've a Win2000 AD built up 2 years ago and the nt4 pdc is still left
inside the AD under "Active Directory Users and Computers" --> "Domain
Controllers". i want to delete it from the AD, however, i got an
error saying "DSA object cannot be deleted." how can i clean this up?
thx in advance!!! and happy new year to u all!!!

regards,
LM

Re: how to remove nt4 pdc from Win2000 AD? by Meinolf

Meinolf
Mon Dec 31 13:47:37 PST 2007

Hello lisamok@gmail.com,

Is it only an entry or does it really exist as a physical machine?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.dts-l.org/goodpost.htm

> dear all,
>
> i've a Win2000 AD built up 2 years ago and the nt4 pdc is still left
> inside the AD under "Active Directory Users and Computers" --> "Domain
> Controllers". i want to delete it from the AD, however, i got an
> error saying "DSA object cannot be deleted." how can i clean this up?
> thx in advance!!! and happy new year to u all!!!
>
> regards,
> LM



Re: how to remove nt4 pdc from Win2000 AD? by AaronSankey

AaronSankey
Mon Dec 31 09:43:27 PST 2007


The steps at a high level:

The NT4 PDC needs to be demoted to a BDC
One of the 2000 AD DCs needs to attain the PDC master role
The NT4 DC needs to be removed and de-commissioned

If you are running a Windows 2000 domain and the NT4 PDC is still up,
you have gotten into some shenanigans, but you are going to have to
demote the PDC to a BDC. If this was taken care of two years ago, you
are going to need to locate the PDC emulator as outlined here:

http://support.microsoft.com/kb/234790

If these steps don't tell you where the PDC emulator is, you should run
them on each AD DC to rule out a funky replication problem. If there is
truly no PDC emulator, or if you have just demoted the NT4 PDC to a BDC,
you will have to sieze the PDC emulator role with one of the AD DCs as
outlined here:

http://tinyurl.com/4da5e

NT4 DCs don't have a DC promo function -- or an "un"promo funtion -- so
the easiest way to remove them is to turn them off and then remove the
DC from the replication list by doing the "Procedure 2: Windows 2000
(All versions) Windows Server 2003 RTM" steps for a (from
http://support.microsoft.com/kb/216498):

After this is done, sometimes the computer is still visable in ADU&C.
You can fix this with ADSI Edit. ADSI Edit is part of the support
tools, which are on the Windows 2000 Server CD:

http://support.microsoft.com/kb/301423

After it is installed:

1. Click start - Programs - Windows Support Tools - ADSI Edit
2. Expand Domain NC, expand dc=domain,dc=com and then expand
ou=domain controllers (or whatever OU the DC is in)
3. Delete the computer object

You will get a dialogue box (I forget what it says at the moment), but
if you enter through and then delete the object again, it will all be
gone.

Then you have to
Then you are done.

I hope that helps,


--
AaronSankey

Re: how to remove nt4 pdc from Win2000 AD? by Jorge

Jorge
Tue Jan 01 07:36:22 PST 2008

if the PDC was upgraded to a w2k DC, then you installed a new w2k DC, then
you removed all the nt4 dcs, then you removed the upgraded DC (so it is not
longer alive)

and that object is still there, then you can delete it using adsiedit.msc

it does depend how that DC was removed...

start with doing a metadata cleanup, for that see:
http://support.microsoft.com/kb/216498

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
<lisamok@gmail.com> wrote in message
news:98321b51-b3be-417e-a9df-1dba84fefc43@u10g2000prn.googlegroups.com...
> dear all,
>
> i've a Win2000 AD built up 2 years ago and the nt4 pdc is still left
> inside the AD under "Active Directory Users and Computers" --> "Domain
> Controllers". i want to delete it from the AD, however, i got an
> error saying "DSA object cannot be deleted." how can i clean this up?
> thx in advance!!! and happy new year to u all!!!
>
> regards,
> LM