Your network contains an active directory domain named contoso.com. The domain contains a domain
controller named DCS. DCS has a server core installation of windows server 2012.
You need to uninstall Active Directory from DC5 manually.
Which tool should you use?
A.
The Remove-WindowsFeaturecmdlet
B.
the dsamain.exe command
C.
the ntdsutil.exe command
D.
the Remove-ADComputercmdlet
Explanation:
A: Removes Roles and Features to remove DC use Uninstall-addsdomaincontroller B.Exposes Active Directory
data that is stored in a snapshot or backup as a Lightweight Directory Access
Protocol (LDAP) server
C: Manually removes a domain controller
D: Removes AD computer object
http://technet.microsoft.com/en-us/library/ee662310.aspx http://support.microsoft.com/kb/216498
http://technet.microsoft.com/en-us/library/ee617250.aspx
i think the correct answer will be “D”
the Remove-ADcomputercmdlet
D is best because ntdsutil is only used when AD server has died and can’t be recovered.
C. especially bc they mention “manually”.
None of the answers are correct. DC5 is a domain controller. The question asks to uninstall Active Directory from DC5. You need to run “Uninstall-ADDSDomaincontroller” and then “Uninstall-WindowsFeature AD-Domain-Services” to remove any Active Direectory components. Answer A isn’t correct because DC5 hasn’t been demoted.
check graphic at https://technet.microsoft.com/en-us/library/jj574104.aspx
demote done automatically when adds is removed with remove-windowsfeature
It is not done automatically. If you attempt to remove the AD DS role before demoting the server, Windows PowerShell blocks you with an intentional error : Uninstall-WindowsFeature : An uninstallation prerequisite step failed duringthe removal of AD-Domain-Services, and uninstallation cannot continue.1. The domain controller needs to be demoted before the Active DirectoryDomain Services Role can be uninstalled. Look at https://technet.microsoft.com/en-us/library/jj574104.aspx for more informations.
C is absolutely wrong! https://technet.microsoft.com/en-us/library/jj574104.aspx#BKMK_PS
A is wrong because it does not work without demoting the DC first, but it is the right command you the DC is already demoted to remove AD from the server.
B is wrong dsamain is used to get data from a snapshot or backup
C ?
D is wrong Remove-ADComputer will remove the computer account from AD, will not remove AD DS from DC5.
A is wrong bc needs demotion first and it’s for w2008 (Remove-WindowsFeature)
B you say
C “Ntdsutil.exe is a command-line tool that provides management facilities for Active Directory Domain Services (AD DS) and Active Directory Lightweight Directory Services (AD LDS). You can use the ntdsutil commands to perform database maintenance of AD DS, manage and control single master operations, and remove metadata left behind by domain controllers that were removed from the network without being properly uninstalled. This tool is intended for use by experienced administrators.”
https://technet.microsoft.com/it-it/library/cc753343%28v=ws.10%29.aspx
D you say
maybe you move global catalog before use Uninstall-ADDSDomainController 🙂
None of the propositions is right. What should be done:
In Server Roles and Features, Clear the Active Directory Domain Services check box.
If the server is currently a domain controller, this does not remove the AD DS role and instead switches to a Validation Results dialog with the offer to demote.
The equivalent ADDSDeployment and ServerManager Windows PowerShell cmdlets are:
Uninstall-AdDsDomainController
Remove-WindowsFeature AD-Domain-Services
https://technet.microsoft.com/en-us/library/jj574104.aspx
I think “uninstall Active Directory from DC5 manually” means that you can’t remove AD from the server, in case DC5 doesn’t boot up anymore for example.
In that case, you will need to remove the DC5 object from ADUC and AD Sites & Services, then run NTDSutil to cleanup metadata.
It explained here: http://www.rebeladmin.com/2016/01/how-to-remove-active-directory-server-manually/
If you would like to get a good deal from this post then you have to apply these strategies to your won website.|
I’m not sure exactly why but this web site is loading incredibly slow for me. Is anyone else having this issue or is it a problem on my end? I’ll check back later and see if the problem still exists.|
definitely IT’S A
I tested in my lab.
when you use remove windows feature cmdlet in W2012, it automatically switches to uninstall-windowsfeature and starts uninstalling without any problem.(it just shows a note that it states “cmdlet uninstall-windowsfeature at command pipline postion 1” which you specify the the role that you want to unistall
None of the answers look right for the task at hand.
A.
The Remove-WindowsFeaturecmdlet
The Remove-WindowsFeature cmdlet has been replaced in Windows Server 2012 and forward by the Uninstall-WindowsFeature cmdlet
B.
the dsamain.exe command
Exposes Active Directory data that is stored in a snapshot or backup as a Lightweight Directory Access Protocol (LDAP) server.
C.
the ntdsutil.exe
use Ntdsutil command to seize the roles or clean up metadata
D.
the Remove-ADComputercmdlet
Removes an Active Directory computer and not the whole AD.
Correct procedure is =
First demote the DC by Uninstall-AddsDomainController
then Uninstall-windowsfeature
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/demoting-domain-controllers-and-domains–level-200-
Update :
Remove-WindowsFeature can still be used on 2012 and it automatically treats it as Unistall-windowsfeature.
Therefore the closest answer can be Remove-windowsfeature as Uninstall-AddsDomainController (1st step in removing AD) is not an available option in the question.