[Samba] Remove dead server from domain.

[Andrew Bartlett]

We are aware of some issues in this area, but feel free to file a bug.

We are focussing on getting 4.0 out at the moment, but I would like to
have a force demote utility in the future, as well as sorting these
issues out.  To do it properly (particularly live) is actually quite
difficult, there are a lot of steps that should be done to ensure the DC
being demoted has no FSMO roles left and knows it is demoted. 

Andrew Bartlett

On Mon, 2012-12-10 at 15:06 +0100, X-Dimension at gmx.net wrote:
> I have the same problem here.
> Would be nice to see a solution for it.
> 
> -------- Original-Nachricht --------
> > Datum: Mon, 10 Dec 2012 13:49:14 +0000
> > Von: Alex Matthews <qoole.samba at lillimoth.com>
> > An: samba at lists.samba.org
> > Betreff: Re: [Samba] Remove dead server from domain.
> 
> > Hi all,
> > 
> > Sorry to bump my own thread but are there any suggestions for this issue?
> > 
> > Thanks,
> > 
> > Alex
> > 
> > On 05/12/2012 12:53, Thomas Simmons wrote:
> > > Just to note, I have seen the same problem deleting "real" Windows 
> > > Server DCs with rc4 and rc5. The first time I try deleting the DC via 
> > > ADUC, I get the error:
> > >
> > > *Windows cannot delete object LDAP://10.1.1.254/CN=ADC2,OU=Domain 
> > > <http://10.1.1.254/CN=ADC2,OU=Domain> 
> > > Controllers,DC=internal,DC=testdom,DC=com because:
> > > The parameter is incorrect.
> > >
> > > On subsequent tries, the following error is displayed:
> > >
> > > Windows cannot delete object LDAP://10.1.1.254/CN=ADC2,OU=Domain 
> > > <http://10.1.1.254/CN=ADC2,OU=Domain> 
> > > Controllers,DC=internal,DC=testdom,DC=com because:
> > > The specified module could not be found.*
> > > *
> > > *
> > > *My testing has shown that Windows Servers often fail to demote in 
> > > various circumstances, so a solution to remove them from AD would be 
> > > very useful.*
> > >
> > >
> > > On Wed, Dec 5, 2012 at 7:36 AM, Alex Matthews 
> > > <qoole.samba at lillimoth.com <mailto:qoole.samba at lillimoth.com>> wrote:
> > >
> > >     Hiya,
> > >
> > >
> > >     I have an S4 domain running that I added another S4 machine to as
> > >     an extra domain controller. That machine, unfotunately died (quite
> > >     spectacularly I must say, think magic blue smoke). I would like to
> > >     remove the dead domain controller from the domain.
> > >
> > >     In ADUC I can see the DC under 'Domain Controllers' but when I try
> > >     to delete it (having ticked the 'permanently offline' box) I get
> > >     the following error:
> > >
> > >     "Windows cannot delete object
> > >     LDAP://tainan.internal.stmaryscollege.co.uk/CN=PEFW01,OU=Domain
> > >     <http://tainan.internal.stmaryscollege.co.uk/CN=PEFW01,OU=Domain>
> > >     Controllers,DC=internal,DC=stmaryscollege,DC=co,DC=uk because:
> > >
> > >     The specified module could not be found."
> > >
> > >     Is there a command line tool that I could try (samba-tool doesn't
> > >     seem to have an option to remove the machine).
> > >
> > >     Any other suggestions?
> > >
> > >     Thanks,
> > >
> > >     Alex
> > >     -- 
> > >     To unsubscribe from this list go to the following URL and read the
> > >     instructions: https://lists.samba.org/mailman/options/samba
> > >
> > >
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org