ColdFusionUK

Please excuse me as I'm quite new to domains...

I have been given the task at work to remove a domain, we have 2, MLLB and HEALTHCARE. Usually I would go onto the last remaining DC on the HEALTHCARE domain and demote it, thus removing the domain. The problem is, there isn't a DC on the HEALTHCARE domain, the last one recently died a horrible painful death. When I look in Active Directory on the DC's in the MLLB domain, I can only see MLLB... but when logging into a client machine there is still an option to log onto the HEALTHCARE domain.

I have thought about building a new DC and creating a HEALTHCARE domain and then demoting it, would that work?

Sorry if this doesn't make much sense!

Regards, Luke

a2amali

Hello This helped me a few months ago..

Removing Orphaned Domains from Active Directory
1. Determine the domain controller that holds the Domain Naming Master Flexible Single Master Operations (FSMO) role. To identify the server holding this role:a. Start the Active Directory Domains and Trusts Microsoft Management Console (MMC) snap-in from the Administrative Tools menu.
b. Right-click the root node in the left pane titled Active Directory Domains and Trusts, and then click Operations Master.
c. The domain controller that currently holds this role is identified in the Current Operations Master frame.NOTE: If this changed recently, not all computer may have received this change yet due to replication.

For more information about FSMO roles, click the following article number to view the article in the Microsoft Knowledge Base:
197132 (http://support.microsoft.com/kb/197132/) Windows 2000 Active Directory FSMO Roles

2. Verify that all servers for the domain have been demoted.
3. Click Start, point to Programs, point to Accessories, and then click Command Prompt.
4. At the command prompt, type: ntdsutil.
5. Type: metadata cleanup, and then press ENTER.
6. Type: connections, and then press ENTER. This menu is used to connect to the specific server on which the changes will occur. If the currently logged-on user is not a member of the Enterprise Admins group, alternate credentials can be supplied by specifying the credentials to use before making the connection. To do so, type: set creds domainname username password , and then press ENTER. For a null password, type: null for the password parameter.
7. Type: connect to server servername (where servername is the name of the domain controller holding the Domain Naming Master FSMO Role), and then press ENTER. You should receive confirmation that the connection is successfully established. If an error occurs, verify that the domain controller being used in the connection is available and that the credentials you supplied have administrative permissions on the server.
8. Type: quit, and then press ENTER. The Metadata Cleanup menu is displayed.
9. Type: select operation target, and then press ENTER.
10. Type: list domains, and then press ENTER. A list of domains in the forest is displayed, each with an associated number.
11. Type: select domain number, and then press ENTER, where number is the number associated with the domain to be removed.
12. Type: quit, and then press ENTER. The Metadata Cleanup menu is displayed.
13. Type: remove selected domain, and then press ENTER. You should receive confirmation that the removal was successful. If an error occurs, please refer to the Microsoft Knowledge Base for articles on specific error messages.
14. Type: quit at each menu to quit the NTDSUTIL tool. You should receive confirmation that the connection disconnected successfully.


http://support.microsoft.com/kb/230306

ColdFusionUK

Thank you for the swift reply. I found the server that the master domain names sit on. It only lists the existing one which is the MLLB domain, so I thought perhaps its sat on the other primary controller, still no joy :(

It's strange, there is no evidence on the servers to show there was a HEALTHCARE domain that even existed, yet, when logging in on a client machine the option is there.