What are the options for removing Servers listed in the 'Connect To' dialog box on the 'Active Roles Server Login' form?
Invalid entries are cached when manually typed into the Connect to Administration Service dialog and will be listed in the drop down list even if the connection fails.
The server list for the Connect to Dialog comes from several locations:
1) The Active Roles Server Service caches all connections for the previous 24 hours by any MMC Console Sessions. Restart the Active Roles Administration Service as this information is cached until the service is restarted or 48 hours, which ever comes first.
2) Remove entry in the Service Connection Points Active Directory Location. The ARS service registers itself with in every of the Managed Domains in the following location:
CN=Enterprise Directory Manager,CN=Aelita,CN=System,DC=company,DC=com
For the invalid ARS service you can just remove the Service Connection Points or they will be removed from list automatically after time passes (if those Service Connection Points weren't refreshed for 48 hours)
3) For the live ARS services you want to hide from clients. Simply deny users list the Service Connection Point objects in Active Directory natively by applying this permission:
Target object: /System/Aelita/Enterprise Directory Manager/
Right: Deny List Object
Trustee: Domain Users (or other group)
This should be done for all Managed Domains, as ARS Service publishes itself in each corresponding Managed Domain.
4) The Microsoft MMC Console that the Active Roles Server utilizes also caches previous connection attempts on the local computer where the Active Roles Management Console is executed.
Find and delete the following file: Active Roles Server located at: %drive%:\Users\%username%\AppData\Roaming\Microsoft\MMC, now relaunch the Active Roles Server Management Console.