Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies. Only from Platform Scholar.
COURSE of the MONTH
14 days, 6 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
Manually removing DC from Domain
Posted on 2011-03-09
Someone previously removed an old DC (this used to be the only DC) from my domain a while back. I keep finding remnants of this old server in AD and DNS. What is the best practice for cleaning up AD/DNS to remove this old server.
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
5-
3
8 Comments
Metadata cleanup should be performed.
http://support.microsoft.com/kb/216498
http://www.petri.co.il/delete_failed_dcs_from_ad.htm
Let us know if you run into any issues.
http://support.microsoft.com/kb/216498
http://www.petri.co.il/delete_failed_dcs_from_ad.htm
Let us know if you run into any issues.
Also the metadata cleanup does not always remove the DC (server object) under Sites and Services. So it should be manually removed.
What are these remnants you refer to ? the _msdcs specific records ?
What are these remnants you refer to ? the _msdcs specific records ?
Yes, there is an entry in DNS under "my domain.local" > _msdcs for the server. The strange thing is that this is the only server listed under this section. Should I add my 2 new DCs and remove the old one here?
The other two DCs should have already register these SRV records on their. Restarting Netlogon service can accomplish that unless there is any issue from DCs standpoint i.e dynamic registration
http://support.microsoft.com/kb/241505
SRV Resource Records May Not Be Created on Domain Controller
http://support.microsoft.com/?kbid=239897
Troubleshooting Common Active Directory Setup Issues in Windows 2000
http://support.microsoft.com/?kbid=260371
How to Verify the Creation of SRV Records for a Domain Controller
http://support.microsoft.com/?kbid=241515
Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS
http://support.microsoft.com/?kbid=291382
Windows 2000 DNS and Active Directory Information and Technical Resources
http://support.microsoft.com/?kbid=298448
http://support.microsoft.com/kb/241505
SRV Resource Records May Not Be Created on Domain Controller
http://support.microsoft.com/?kbid=239897
Troubleshooting Common Active Directory Setup Issues in Windows 2000
http://support.microsoft.com/?kbid=260371
How to Verify the Creation of SRV Records for a Domain Controller
http://support.microsoft.com/?kbid=241515
Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS
http://support.microsoft.com/?kbid=291382
Windows 2000 DNS and Active Directory Information and Technical Resources
http://support.microsoft.com/?kbid=298448
*The other two DCs should have already registered these SRV records on their own*.
The bunk record (old/dead DC) needs to be deleted.
The bunk record (old/dead DC) needs to be deleted.
The other two servers appear to have their records in all the right places, except for the one I mentioned above. Can I just add them manually?
Well, they may not be needed, depending on where you are looking under the _msdcs node.
If you are looking under _sites than the only DC belonging to that site should have an SRV record there and it is possible that site only had the bad DC in it.
The _tcp node on the other hand should have all the live writable DCs with their _kerberos, _ldap, _kpassed etc SRV records.
See the fourth link provided.
If you are looking under _sites than the only DC belonging to that site should have an SRV record there and it is possible that site only had the bad DC in it.
The _tcp node on the other hand should have all the live writable DCs with their _kerberos, _ldap, _kpassed etc SRV records.
See the fourth link provided.
Featured Post
Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP, Windows Server…
- Ransomware
- Experts Exchange
- Windows XP
- Windows OS
- Windows Server 2008
- Windows Server 2003, Security
This process allows computer passwords to be managed and secured without using LAPS. This is an improvement on an existing process, enhanced to store password encrypted, instead of clear-text files within SQL
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008.
Determine the location of the FSMO roles by lo…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses
Course of the Month14 days, 6 hours left to enroll
770 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.