Solved

What happens to application data when a Domain Controller is demoted

Posted on 2008-06-19
9
271 Views
Last Modified: 2008-06-20
I have a home server that I set up as a DC. Wish I hadn't, but I didn't realise at the time what I was doing.

Anyway, now I'd like to demote the server. Fact is: I don't even need a domain controller. However, I'm not sure what all the consequences of demoting will be. I know I'll lose the GC, but what about existing applications on the server. What happens to them? Will I have to reinstall absolutely everything?
0
Comment
Question by:GessWurker
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
9 Comments
 
LVL 96

Assisted Solution

by:Lee W, MVP
Lee W, MVP earned 200 total points
ID: 21823142
Anything that relies on Active Directory will break.

Anything that doesn't will work just fine.

What problems are you having?
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 300 total points
ID: 21823165
You can demote it and still keep it as a server which is hosting user data and applications. The only exception I am aware of is Exchange - do NOT demote an Exchange Server whilst Exchange is installed.

But you can safely demote any DC and all applications will remain in tact. Don't forget any workstations joined to the domain won't work after the demotion!
0
 

Author Comment

by:GessWurker
ID: 21823329
leew:

The problem I encountered was that a particular application I must learn and develop with could not be installed on a domain controller. It required a "local" user account as a sql login and no such thing exists on my DC.

tigermutt:

My domain controller is also a web server - I wonder what will happen to the IUSR account? Also, MS SQL 5000 is installed. Naturally, all the logins are of the domain variety. I wonder if I'll have to completely uninstall sql and start over?
0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 

Author Comment

by:GessWurker
ID: 21823349
oh... and another thing. The server has my wife's graphic design business site on it, as well as some of my own humble pages. I'm afraid everything's gonna vanish if I demote the server.
0
 

Author Comment

by:GessWurker
ID: 21823410
oh... running IIS and Apache.  And when AD disappears, won't all the folder/share permissions disappear with it?
0
 

Author Comment

by:GessWurker
ID: 21823438
tigermatt: sorry I got your name wrong! no insult was intended!
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 21823621
>>> "sorry I got your name wrong! no insult was intended!"
No problem - I am always typing it in wrong, with "tigermast" and "tigermutt" too! I didn't notice it at all until you pointed it out, to be honest.

I think the IUSR account will just be migrated back to the local users and groups, but I've not done this myself for a while so I'm not exactly sure. I would definitely recommend you create yourself a good backup of the server before carrying out this procedure, just in case.

-tigermatt
0
 

Author Comment

by:GessWurker
ID: 21834720
Hi guys:

I came up with an alternative solution. I installed VMWare and created a virtual server that's just a plain old member of the domain. No need for me to demote my server now.

I'll split the points.

Thanks!
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 21834783
Thanks very much!
--tigermatt
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question