Demoting a Windows Server 2008 Domain Controller

Hello,

I am planning to demote my Windows Server 2008 Domain Controller (I have another primary one) and want to know what/if anything I should prepare for and expect to have trouble with?  I am going to install Microsoft's Forefront server on this machine, which cannot be done if it is a DC.  So, I'm planning to demote it.  Although, given past history, I am expecting some hiccups and bumps, but I don't want anything too serious that would cause the users to be deleted (even though this is not the only DC).  Does anyone have an experience you would share to help me avoid a meltdown?

Thanks,
Bridget
bridgetimillerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

GovvyCommented:
Run 'netdom query fsmo' to check if that host holds any FSMO roles - if so transfer them first
Enable DNS debug logging to confirm if any workstation or member servers use that server for DNS lookups
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Benjamin MOREAUProject ManagerCommented:
I'm agree with Govvy; check FSMO. You also have to check that your server is not the only Global Catalog. If so, just add another server as Global Catalog & wait for replication.

Check that your client computer are not using only this DNS server on the network card config.

After checking this, you can demoting your DC :)
0
Darius GhassemCommented:
Make sure you remove DNS IP address from any server or client. Go into DHCP Scope Options to remove the DNS server out of the DNS options.

Run dcdiag to check health of the other DC.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.