• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 484
  • Last Modified:

Manually removing DC from Domain

Someone previously removed an old DC (this used to be the only DC) from my domain a while back.  I keep finding remnants of this old server in AD and DNS.  What is the best practice for cleaning up AD/DNS to remove this old server.
0
emauch
Asked:
emauch
  • 5
  • 3
1 Solution
 
RickSheikhCommented:
Metadata cleanup should be performed.

http://support.microsoft.com/kb/216498

http://www.petri.co.il/delete_failed_dcs_from_ad.htm

Let us know if you run into any issues.
0
 
RickSheikhCommented:
Also the metadata cleanup does not always remove the DC (server object) under Sites and Services. So it should be manually removed.

What are these remnants you refer to ? the _msdcs specific records ?
0
 
emauchAuthor Commented:
Yes, there is an entry in DNS under "my domain.local" > _msdcs for the server.  The strange thing is that this is the only server listed under this section.  Should I add my 2 new DCs and remove the old one here?
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
RickSheikhCommented:
The other two DCs should have already register these SRV records on their. Restarting Netlogon service can accomplish that unless there is any issue from DCs standpoint i.e dynamic registration

http://support.microsoft.com/kb/241505

SRV Resource Records May Not Be Created on Domain Controller
http://support.microsoft.com/?kbid=239897

Troubleshooting Common Active Directory Setup Issues in Windows 2000
http://support.microsoft.com/?kbid=260371

How to Verify the Creation of SRV Records for a Domain Controller
http://support.microsoft.com/?kbid=241515

Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS
http://support.microsoft.com/?kbid=291382

Windows 2000 DNS and Active Directory Information and Technical Resources
http://support.microsoft.com/?kbid=298448
0
 
RickSheikhCommented:
*The other two DCs should have already registered these SRV records on their own*.

The bunk record (old/dead DC) needs to be deleted.
0
 
emauchAuthor Commented:
The other two servers appear to have their records in all the right places, except for the one I mentioned above.  Can I just add them manually?
0
 
RickSheikhCommented:
Well, they may not be needed, depending on where you are looking under the _msdcs node.

If you are looking under _sites than the only DC belonging to that site should have an SRV record there and it is possible that site only had the bad DC in it.

The _tcp node on the other hand should have all the live writable DCs with their _kerberos, _ldap, _kpassed etc SRV records.

See the fourth link provided.
0
 
emauchAuthor Commented:
Thank you for all your help.
0

Featured Post

Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now