Uninstall-ADDSDomainController
Synopsis
Description
Parameters
-Credential
Specifies the user name and password that corresponds to the account used to install the domain controller. To prompt the user to supply a password, use "(Get-Credential)" in place of an existing PSCredential type. This causes Windows PowerShell to prompt the user to enter credentials using the Windows security login UI.
Required? false
Position? named
Default value NULL
Accept pipeline input? false
Accept wildcard characters? false
-DemoteOperationMasterRole <SwitchParameter>
Indicates that (forced) demotion should continue even if an operations master role is discovered on domain controller from which AD DS is being removed.
Required? false
Position? named
Default value NULL
Accept pipeline input? false
Accept wildcard characters? false
-DnsDelegationRemovalCredential <PSCredential>
Specifies the account credentials (user name and password) to use when you create or remove the DNS delegation. If you do not specify a value, the account credentials that you specify for the AD DS installation or removal are used to remove the DNS delegation. As an alternative, you can specify the asterisk (*) to prompt the user to enter credentials.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Force <SwitchParameter>
When this parameter is specified any warnings that might normally appear during the uninstallation and removal of the domain controller will be suppressed to allow the cmdlet to complete its operation. This parameter can be useful to include when scripting uninstallation.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-ForceRemoval <SwitchParameter>
Forces the removal of a domain controller. Use this parameter to force the uninstall of AD DS if you need to remove the domain controller and do not have connectivity to other domain controllers within the domain topology.
Required? true
Position? named
Default value NULL
Accept pipeline input? false
Accept wildcard characters? false
-IgnoreLastDCInDomainMismatch <SwitchParameter>
Used in conjunction with -LastDomainControllerInDomain. This parameter specifies whether the Windows PowerShell ignores any inconsistency that it detects with the value that you specify for -LastDomainControllerInDomain. For example, if you specify -LastDomainControllerInDomain but Windows PowerShell detects that there is actually another active domain controller in the domain, you can specify -IgnoreLastDCInDomainMismatch to have Windows PowerShell continue the removal of AD DS from the domain controller despite the inconsistency that it has detected. Similarly, if you do not specify -LastDomainControllerInDomain but Windows PowerShell cannot detect that another domain controller is in the domain, you can specify -IgnoreLastDCInDomainMismatch to have Windows PowerShell continue to remove AD DS from the domain controller.
Required? false
Position? named
Default value NULL
Accept pipeline input? false
Accept wildcard characters? false
-IgnoreLastDnsServerForZone <SwitchParameter>
Specifies whether to continue the removal of AD DS despite the fact that the domain controller is the last DNS server for one or more of the Active Directory-integrated DNS zones that it hosts.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-LastDomainControllerInDomain <SwitchParameter>
Specifies whether the computer from which AD DS is being removed is the last domain controller in the domain.
Required? false
Position? named
Default value NULL
Accept pipeline input? false
Accept wildcard characters? false
-LocalAdministratorPassword <SecureString>
Specifies a local administrator account password when AD DS is removed from a domain controller. In earlier releases, where uninstall of AD DS was done using Dcpromo.exe for demotion, the default was to allow an empty password for this setting. In Windows PowerShell, the ADDS Deployment module requires that a non-empty password string value be assigned. If a value is not provided for this parameter, you will be prompted to enter a value for the password at the Windows PowerShell prompt. The password value must be a secure string.
Required? false
Position? named
Default value <mandatory>
Accept pipeline input? false
Accept wildcard characters? false
-NoRebootOnCompletion <SwitchParameter>
Specifies whether to not restart the computer upon completion, regardless of success. (By default, reboot upon completion occurs when this cmdlet is used and this parameter is omitted.) As a general rule, Microsoft support recommends that you not use this parameter except for testing or troubleshooting purposes because once configuration has completed the server will not function correctly as either a member server or a DC until it is rebooted.
Required? false
Position? named
Default value NULL
Accept pipeline input? false
Accept wildcard characters? false
-RemoveApplicationPartitions <SwitchParameter>
Specifies whether to remove application partitions during the removal of AD DS from a domain controller.
Required? false
Position? named
Default value NULL
Accept pipeline input? false
Accept wildcard characters? false
-RemoveDnsDelegation <SwitchParameter>
Specifies whether to preserve DNS delegations that point to this DNS server from the parent DNS zone.
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-RetainDCMetadata <SwitchParameter>
If this parameter is used it indicates that metadata from the domain controller should be preserved after uninstallation is completed.
Required? false
Position? named
Default value FALSE
Accept pipeline input? false
Accept wildcard characters? false
-SkipPreChecks <SwitchParameter>
Indicates that only a base set of validations will be performed. This behavior is equivalent to the validations that were performed when using Dcpromo.exe in earlier versions of Windows Server to add a new domain controller. When this switch parameter is set, it specifies that additional preliminary checks should be bypassed. For more information on the scope of these additional preliminary checks that the ADDSDeployment module performs by default when using Windows Server 2012, refer to the table in the section “Prerequisite Checking” in the Understand and Troubleshoot AD DS Simplified Administration in Windows Server 2012 guide (http://go.microsoft.com/fwlink/?LinkID=237244).
Required? false
Position? named
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Confirm <SwitchParameter>
Prompts you for confirmation before running the cmdlet.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
-WhatIf <SwitchParameter>
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? falseSyntax
Uninstall- ADDSDomainController [-SkipPreChecks] [-LocalAdministratorPassword <SecureString>] [-Credential <PSCredential>] [-DemoteOperationMasterRole] [-DnsDelegationRemovalCredential <PSCredential>] [-IgnoreLastDCInDomainMismatch] [-IgnoreLastDnsServerForZone] [-LastDomainControllerInDomain] [-NoRebootOnCompletion] [-RemoveApplicationPartitions] [-RemoveDnsDelegation] [-RetainDCMetadata] [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]
Uninstall- ADDSDomainController [-SkipPreChecks] [-LocalAdministratorPassword <SecureString>] [-Credential <PSCredential>] [-DemoteOperationMasterRole] [-ForceRemoval] [-NoRebootOnCompletion] [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]
C:\PS>Uninstall- ADDSDomainController
Removes AD DS from an additional domain controller in a domain and causes the user to be prompted to set and confirm the local Administrator password prior to completing the removal process.
Get-Command Uninstall-ADDSDomainController
. Install-ADDSDomainController
