Can you retire a root AD domain when it has child domains?