replikationsversuche auf PDC unterbinden W2k Server

Da wünschen wir dem erkankten Admin das es ihm schnell wieder besser geht. 0

Microsoft sagt:

How to remove data in Active Directory after an unsuccessful domain controller demotion
http://support.microsoft.com/kb/216498/


und weiter
http://support.microsoft.com/kb/332199/en-us

After you use the dcpromo /forceremoval command, metadata for the demoted computer is not deleted on surviving domain controllers. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
216498 (http://support.microsoft.com/kb/216498/) How to remove data in Active Directory after an unsuccessful domain controller demotion
The following are items that you must address, if applicable, after forcibly demoting a domain controller:
1. Remove the computer account from the domain.
2. Verify that DNS records, such as A, CNAME, and SRV Records, are removed, and remove them if they are present.
3. Verify that FRS member objects (FRS and DFS) are removed, and remove them if they are present. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
296183 (http://support.microsoft.com/kb/296183/) Overview of Active Directory objects that are used by FRS
4. If the demoted computer is a member of any security groups, remove it from those groups.
5. Remove any DFS references to the demoted server, such as links or root replicas.
6. A surviving domain controller must seize any operations master roles, also known as flexible single master operations or FSMO, that were previously held by the forcibly demoted domain controller. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
255504 (http://support.microsoft.com/kb/255504/) Using Ntdsutil.exe to seize or transfer FSMO roles to a domain controller
7. If the domain controller that you are demoting is a DNS server or global catalog server, you must create a new GC or DNS server to satisfy load balancing, fault tolerance, and configuration settings in the forest.
8. When you use the remove selected server command in NTDSUTIL, the NTDSDSA object, the parent object for incoming connections to the domain controller that you forcibly demoted is removed. The command does not remove the parent server objects that appear in the Sites and Services snap-in. Use the Active Directory Sites and Services MMC snap-in to remove the server object if the domain controller will not be promoted into the forest with the same computer name.

Gruß Rafiki