This online training series prepares users for : Installing, Configuring, and Administering Microsoft Windows XP Professional. Courses cover such topics as attended and unattended installations, managing resources and hardware, networking and security, desktop configuration, and monitoring and optimizing performance. Students taking this course should have general knowledge of Microsoft Windows networking and administration.
Running Dcpromo on an existing domain controller allows you to remove from the domain controller and demotes it to either a stand-alone server or a member server. If the domain controller is the last domain controller in the domain, it will become a stand-alone server. If other domain controllers will remain in the domain, it will become a member server. A stand-alone server is a computer that runs the Windows Server 2003 operating system but does not participate in a domain. It does not share account information with any other computer and cannot provide access to domain accounts. A member server is a computer that runs the Windows Server 2003 operating system and participates in a domain, but does not store a copy of the directory database. For a member server, permissions can be set on resources that allow users to connect to the server and use its resources.
If you remove Active Directory from all domain controllers in a domain, you also delete the directory database for the domain, and the domain no longer exists. Computers joined to this domain can no longer log on to the domain or use domain services.
To remove Active Directory, you must have administrative credentials as follows:
To remove Active Directory from a domain controller that is the last domain controller in a tree-root or a child domain, you must provide enterprise administrator
credentials or be a member of the Enterprise Admins group.
To remove Active Directory from a domain controller that is the last domain controller in the forest, you must log on to the domain as Administrator or as a member of the Domain Admins group.
To remove Active Directory from a domain controller that is not the last domain controller in the domain, you must be logged on as a member of either the
Domain Admins group or the Enterprise Admins group.
Note Before you attempt to install Active Directory on a server, you must have an edition of Windows Server 2003 family installed and a static IP address configured for the server. Refer to Lesson 1 for instructions on configuring a static IP address for a server.
Because removing the last replica of an application directory partition will result in the permanent loss of any data contained in the partition, the Active Directory Installation Wizard will not remove application directory partitions unless you confirm the deletion.You must decide when it is safe to delete the last replica of a particular partition. If the domain controller holds a TAPI application directory partition, you may need to use the Tapicfg.exe command-line tool to remove the TAPI application directory partition. For more information on using , refer to Windows Server 2003 help.
Read more on Removing Active Directory Services from a Domain Controller…
A specific company-operated CA is configured to issue certificates only to employees in the research department. A research department Web site needs to he restricted so that only employees of the research department can access it. Outlook Web Access and a PKI are already established. You want the highest level of security.
Recent Articles