Your network contains an Active Directory domain named contoso.com. The domain contains a
domain controller named DC5. DC5 has a Server Core Installation of Windows Server 2012 R2.
You need to uninstall Active Directory from DC5 manually.
Which tool should you use?
A.
The dsamain.exe command
B.
The ntdsutil.exe command
C.
The Remove-ADComputercmdlet
D.
The Remove-WindowsFeaturecmdlet
Explanation:
The Remove-ADComputercmdlet removes an Active Directory computer.
Example: Remove-ADComputer -Identity “FABRIKAM-SRV4”
Remove one particular computer.References:
http://technet.microsoft.com/en-us/library/ee662310.aspx
http://support.microsoft.com/kb/216498
http://technet.microsoft.com/en-us/library/ee617250.aspx
Why not D?
Via Ricky: “The Remove-WindowsFeature cmdlet has been replaced in Windows Server 2012 and forward by the Uninstall-WindowsFeature cmdlet”
msdn.microsoft.com/en-us/library/ee662310.aspx
OK, it says it is 2012 R2, so why not D?
never mind
Why not D ?
This is because “Server Manager” IS NOT available in Server Core Installation of Windows Server 2012 R2. Therefore, we cannot use “Remove-WindowsFeature”.
ok but… isn’t necessary to demote first the DC ?
Thanks guys
Got to demote first. B ntdsutil.exe
I think this question has been mistyped.
Letter ‘D’ should be Uninstall-WindowsFeature.
If I am reading this correctly, the question states that you want to uninstall Active Directory from DC5 manually, NOT remove DC5 from AD.
Uninstalling Active Directory would imply removing the Roll, not the entire computer from AD.
The Uninstall-WindowsFeature removes the ROLL, and leaves the computer as a member of AD. Remove-ADComputercmdlet removes the computer from AD entirely.
Remove the roll? Yum!
I disagree.. the question is “uninstall Active Directory from DC5 manually”.
So Remove-ADComputercmdlet just removes DC5 from AD (its entry) but not unistall AD
Remove-WindowsFeature is a valid PowerShell cmdlet that unistall AD from a server.
The right answer is D.
The question states that you want to remove Active Directory. It does not state that you want to remove the computer. I think Remove-WindowsFeature cmdlet is correct.
BUt I think You cannot remove the Active directory until you demote the DC
so first you have to do he Remove-ADComputercmdlet and then remove the Active directory
to demote a DC:
Uninstall-ADDSDomainController -ForceRemoval -DemoteOperationMasterRole
or in GUI, remove the ADDS role to have access in demoting the DC
I tested the Remove-WindowsFeature AD-Domain-Services in SVR2012 and it removes the AD from Domain Controllers OU
I tested the Remove-WindowsFeature AD-Domain-Services in SVR2012 and it removes the AD from Domain Controllers OU
D is the answer
ITS B
B
B
B
B
B
B
B
B
it’s fuckin b boys
Draw your own conclusion :p
A
Exposes Active Directory data that is stored in a snapshot or backup as a Lightweight Directory Access Protocol (LDAP) server.
B
Ntdsutil.exe is a command-line tool for accessing and managing a Windows Active Directory database.
C To remove a computer from ad.
D is the first step in a two-step process used in demoting the ad controller:
https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-ds/deploy/demoting-domain-controllers-and-domains–level-200-
To do it manually you may use NTDSUTIL. so it is “B”.
remove- is for 2008 but it is also available as an alias in 2012
Guess it all depends how you interpret the word ‘manually’ on the line ‘You need to uninstall Active Directory from DC5 manually’.
————–
Why could it be D (The Remove-WindowsFeaturecmdlet)?
Assume that the original question/answer just wasn’t dumped here correctly (or just not updated correctly when 2012R2 was released).
We all know how Microsoft love their latest, greatest powershells, so on the real exam I doubt they’d still be asking 2012R2 candidates about the ‘deprecated-but-still-works-as-an-alias’ Remove-WindowsFeature cmdlet anymore.
They’d be more likely to promote their 2012R2 ‘Uninstall-windowsfeature’ cmdlet instead.
Either way, answer D is a solution – whether it meets their definition of a MANUAL uninstallation – I don’t know? This is the annoying part of Microsoft exams – you too often have to try and put yourself into the mind of whoever writes the test questions and guess exactly what they meant.
————–
Why could it be B (The ntdsutil.exe command)?
I guess if you assume ‘need to uninstall MANUALLY’ means that attempts at uninstalling AD from the server via usual, normal methods have gone bad – then yes you COULD emergency resort to a ntdsutil uninstall. But that would be a last resort, desperate measure as cleaning up all of the leftover metadata etc ain’t fun.
Refer to here for an example – https://chinnychukwudozie.com/2014/01/27/using-ntdsutil-metada-cleanup-to-remove-a-failedoffline-domain-controller-object/
But again, that word ‘MANUALLY’ makes it confusing again – as I guess strictly speaking doing it via ntdsutil is more of a ‘manual’ uninstall, as you have to DO stuff yourself – not just run a cmdlet while you drink coffee.
————–
Just my 2 cents… you make your own call.
Guess it all depends how you interpret the word ‘manually’ on the line ‘You need to uninstall Active Directory from DC5 manually’.
————–
Why could it be D (The Remove-WindowsFeaturecmdlet)?
Assume that the original question/answer just wasn’t dumped here correctly (or just not updated correctly when 2012R2 was released).
We all know how Microsoft love their latest, greatest powershells, so on the real exam I doubt they’d still be asking 2012R2 candidates about the ‘deprecated-but-still-works-as-an-alias’ Remove-WindowsFeature cmdlet anymore.
They’d be more likely to promote their 2012R2 ‘Uninstall-windowsfeature’ cmdlet instead.
Either way, answer D is a solution – whether it meets their definition of a MANUAL uninstallation – I don’t know? This is the annoying part of Microsoft exams – you too often have to try and put yourself into the mind of whoever writes the test questions and guess exactly what they meant.
————–
Why could it be B (The ntdsutil.exe command)?
I guess if you assume ‘need to uninstall MANUALLY’ means that attempts at uninstalling AD from the server via usual, normal methods have gone bad – then yes you COULD emergency resort to a ntdsutil uninstall. But that would be a last resort, desperate measure as cleaning up all of the leftover metadata etc ain’t fun.
Refer to here for an example – https://chinnychukwudozie.com/2014/01/27/using-ntdsutil-metada-cleanup-to-remove-a-failedoffline-domain-controller-object/
But again, that word ‘MANUALLY’ makes it confusing again – as I guess strictly speaking doing it via ntdsutil is more of a ‘manual’ uninstall, as you have to DO stuff yourself – not just run a cmdlet while you drink coffee.
————–
Just my 2 cents… you make your own call (bet this question worded like this doesn’t even exist on the exam anymore anyway!!)