Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Thursday, December 28, 2017 4:29 PM
Nice product, but after a few months of using IPAM it is clear that it is not quite what we need. Maybe the next generation will smooth over the issues we've had with it. We're small enough that a lot of the benefits are lost.
In any case, I'd like to remove IPAM from our domain properly. (Suggestion: provide at least a little bit of information on how to uninstall something when you write all that installation documentation).
So far I have gone into the IPAM console and "unmanaged" the three DNS and/DHCP servers involved. These leaves the "recommended Action" of "Block IPAM Access". That also removed the servers from the relevant GPO's. As I used GPO to grant access, at this point I assume that properly removing IPAM the next steps are:
- Remove the role from the server where IPAM is running along with whatever else the remove role wizard suggests. I'm not too worried about this as after the role is removed the server will be retired.
- Since they weren't set to "Remove this item when it is no longer applied", manually reverse the actions of the IPAM GPO's from where they did apply. (Just those three servers presumably). That is large deleting the scheduled tasks and reversing the firewall exceptions (except of course if I need those exceptions for something - unlikely but I'll check).
- Delete the GPO's.
Is there anything else I am missing? For example permissions on AD, DNS or DHCP that should be removed.
All replies (5)
Friday, December 29, 2017 6:36 AM ✅Answered
Hi,
Maybe you could notice some firewall rules and the permission about computer account of the IPAM server.
More information please refer to the following article:
https://technet.microsoft.com/en-us/library/jj878346%28v=ws.11%29.aspx?f=255&MSPPError=-2147217396
Best Regards,
Frank
Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Tuesday, January 2, 2018 4:29 PM
Thanks, the manual configuration steps in that link and the other associated "manual setup" pages associated with it are just the things I'll need to check an "undo" manually.
Wednesday, January 3, 2018 2:26 PM
Hi Jim,
unfortunately I will not be able to help you uninstalling.
But you might be able to help me.
We were planning to use MS IPAM on Win 2016 server. I just thought let´s give it a try on a new VM but before I wanted to check if I would be able to remove it completely in case I do not like it or in case of any issues.
My search engine led me to this thread.
Could you please tell me why you were unhappy with IPAM? Would be great if I could profit from your experience before installing something which might not work in the end and will be hard to remove.
Thanks in advance!
BR,
Philipp
Wednesday, January 3, 2018 2:54 PM
Hello Philipp,
I can tell you my experience and that is that the product seems to have problems installing correctly when using baseline security policies or the fact that it is installed on a core installation.
Also i did install on two different environments also one with full gui and no policies both failing to show user information in IP tracking.
You can view my post here https://social.technet.microsoft.com/Forums/en-US/winserveripamdhcpdns/thread/4221e07b-c460-4e78-bab3-a3a54e4b30fa/#2edcd26b-dbe0-4365-b02c-60157c528fcd
So it seems that IPAM is not working somehow and found no usefull help and some other people having same issues.
The product works but seems to have some issues still in this version.
Friday, February 7, 2020 12:54 PM
>> I can tell you my experience and that is that the product seems to have problems installing correctly when using baseline security policies or the fact that it is installed on a core installation. <<
Same problem here, but after much digging I finally found out why:
Invoke-IpamGpoProvisioning –Domain >domain_name< –GpoPrefixName >GPO_Prefix name< –IpamServerFqdn >FQDN_IPAMServer< –DelegatedGpoUser Administrator
That is done via powershell. That is not in install guide.
There are a few other items that NEED to be run manually before IPAM works correctly.. at certain points during install.
2 things to note. You CAN'T install on Domain controller (found this out after many installs the hard way) and make sure you read ALL pre-requisites BEFORE you start to know what it will take.
There are many steps NOT done during install, above is one. Google "Install IPAM 2016 step by step" you will get hits to help you with these.
Personally I found a youtube video that helped me because along the way he mentioned many times "check this after each step" to ensure the install is going smoothly. I did that, followed him and voila my IPAM runs fine. IPAM is not an easy install.. could be done better, but it DOES work once you sort out the issues.
I know this is an old thread but hoping this info may prove useful to someone else.