A Windows Domain controller failed demotion - possibly due to disk space - and got caught prompting for username and password for a demotion. Afterwards it would no longer run the domain services or DNS but was still a member of the Domain Controllers group.

We had to delete the server from Active Directory sites and services in order to get rid of it, making sure that we un-ticked any 'prevent the object from being deleted' boxes...

---