Uninstall-ADDSDomainController
Uninstalls a domain controller in Active Directory.
Syntax
Uninstall-ADDSDomainController
[-SkipPreChecks]
[-LocalAdministratorPassword <SecureString>]
[-Credential <PSCredential>]
[-DemoteOperationMasterRole]
[-DnsDelegationRemovalCredential <PSCredential>]
[-IgnoreLastDCInDomainMismatch]
[-IgnoreLastDnsServerForZone]
[-LastDomainControllerInDomain]
[-NoRebootOnCompletion]
[-RemoveApplicationPartitions]
[-RemoveDnsDelegation]
[-RetainDCMetadata]
[-Force]
[-WhatIf]
[-Confirm]
[<CommonParameters>] Uninstall-ADDSDomainController
[-SkipPreChecks]
[-LocalAdministratorPassword <SecureString>]
[-Credential <PSCredential>]
[-DemoteOperationMasterRole]
[-ForceRemoval]
[-NoRebootOnCompletion]
[-Force]
[-WhatIf]
[-Confirm]
[<CommonParameters>] Description
The Uninstall-ADDSDomainController cmdlet uninstalls a domain controller in Active Directory.
Examples
Example 1: Remove AD DS from a domain controller
Uninstall-ADDSDomainControllerThis command removes AD DS from an additional domain controller in a domain. The user is prompted to set and confirm the local Administrator password prior to completing the removal process.
Parameters
-Confirm
Prompts you for confirmation before running the cmdlet.
| Type: | SwitchParameter |
| Aliases: | cf |
| Position: | Named |
| Default value: | False |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-Credential
Specifies the user name and password that corresponds to the account used to install the domain
controller. Use the Get-Credential cmdlet to prompt the user to supply a password in place of an
existing System.Management.Automation.PSCredential type. This causes Windows PowerShell to
prompt the user to enter credentials using the Windows security login UI.
| Type: | PSCredential |
| Position: | Named |
| Default value: | NULL |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-DemoteOperationMasterRole
Indicates that forced demotion should continue even if an operations master role is discovered on the domain controller from which AD DS is being removed.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | NULL |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-DnsDelegationRemovalCredential
Specifies the account credentials to use when you create or remove the DNS delegation. If you do
not specify a value, the account credentials that you specify for the AD DS installation or removal
are used to remove the DNS delegation. As an alternative, you can specify the asterisk (*) to
prompt the user to enter credentials.
| Type: | PSCredential |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-Force
Forces the command to run without asking for user confirmation.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-ForceRemoval
Indicates that the cmdlet forces the removal of a domain controller. Use this parameter to force the uninstall of AD DS if you need to remove the domain controller and do not have connectivity to other domain controllers within the domain topology.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | NULL |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-IgnoreLastDCInDomainMismatch
Indicates that Windows PowerShell ignores any inconsistency that it detects with the value that you specify for the LastDomainControllerInDomain parameter. For instance, if you specify LastDomainControllerInDomain but Windows PowerShell detects that there is actually another active domain controller in the domain, you can specify the IgnoreLastDCInDomainMismatch parameter to have Windows PowerShell continue the removal of AD DS from the domain controller despite the inconsistency that it has detected. Similarly, if you do not specify LastDomainControllerInDomain but Windows PowerShell cannot detect that another domain controller is in the domain, you can specify IgnoreLastDCInDomainMismatch to have Windows PowerShell continue to remove AD DS from the domain controller.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | NULL |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-IgnoreLastDnsServerForZone
Indicates that the cmdlet continues the removal of AD DS despite the fact that the domain controller is the last DNS server for one or more of the Active Directory-integrated DNS zones that it hosts.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-LastDomainControllerInDomain
Indicates that the computer from which AD DS is being removed is the last domain controller in the domain.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | NULL |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-LocalAdministratorPassword
Specifies a local administrator account password when AD DS is removed from a domain controller. In
earlier releases, where uninstall of AD DS was done using Dcpromo.exe for demotion, the default
was to allow an empty password for this setting. In Windows PowerShell, the ADDS Deployment module
requires that a non-empty password string value be assigned. If a value is not provided for this
parameter, you are prompted to enter a value for the password at the Windows PowerShell prompt. The
password value must be a secure string.
If this parameter is not specified, the cmdlet prompts you to enter and confirm a masked password.
This is the preferred usage when running the cmdlet interactively. If additionally there are no
other arguments specified with the cmdlet, you are prompted to enter a masked password for this
parameter but no confirmation of the password entered is made. This is not recommended as it could
allow a mistyped password to be configured. Another available advanced option is to use the
ConvertTo-SecureString cmdlet and specify the password string inline as unmasked console input,
which is also not a recommended security best practice in production deployments.
| Type: | SecureString |
| Position: | Named |
| Default value: | <mandatory> |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-NoRebootOnCompletion
Indicates that the cmdlet restarts the computer upon completion, regardless of success. By default, reboot upon completion occurs when this cmdlet is used and this parameter is omitted. As a general rule, Microsoft support recommends that you not use this parameter except for testing or troubleshooting purposes because once configuration has completed the server will not function correctly as either a member server or a DC until it is rebooted.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | NULL |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-RemoveApplicationPartitions
Indicates that this cmdlet removes application partitions during the removal of AD DS from a domain controller.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | NULL |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-RemoveDnsDelegation
Specifies whether to preserve DNS delegation that point to this DNS server from the parent DNS Zone.
If you use this parameter, DNS delegations that point to this server from the parent DNS zone will
not be retained after uninstallation of the domain controller. This setting corresponds to the
earlier Dcpromo.exe parameter default of /RemoveDNSDelegation:Yes.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-RetainDCMetadata
Indicates that metadata from the domain controller should be preserved after uninstallation is completed.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | FALSE |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-SkipPreChecks
Indicates that only a base set of validations is performed. This behavior is equivalent to the
validations that were performed when using Dcpromo.exe in earlier versions of Windows Server to
add a new domain controller. When this switch parameter is set, it specifies that additional
preliminary checks should be bypassed. For more information on the scope of these additional
preliminary checks that the ADDSDeployment module performs by default when using Windows Server
2012, refer to the table in the section ADPrep and Prerequisite Checking Architecture in
AD DS Simplified Administration.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
| Type: | SwitchParameter |
| Aliases: | wi |
| Position: | Named |
| Default value: | False |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |