• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 270
  • Last Modified:

get rid of PDC

I have a domain controller (Win 2003) that is the first domain in the forest. I added a second domain controller (Win2008R2) in a different domain in the same forest and trusted the two. Now I want to break the trust and get rid of the first DC. I have the FSMO roles transfered to the new DC, and all of the users in AD are on the new DC as they log into that domain. Can I just demote the first one or is there something else I need to do since it was the first DC in the forest?  Thanks!
0
LunaRavenscroft
Asked:
LunaRavenscroft
  • 6
  • 4
  • 3
2 Solutions
 
Mike KlineCommented:
So the Windows 2003 DC is the only DC for the forest root domain.    

You said you added a second DC but in a different domain.  How did you transfer the FSMO roles off the 2003 box.  Certain FSMO roles are domain wide so where were they transferred to?

Thanks

Mike
0
 
LunaRavenscroftAuthor Commented:
I used ntdsutil and transfered the schema and domain naming roles to the Win2008R2 machine in the new domain. Each dc in the two domains has the other 3 FSMO roles for their domain.
0
 
snusgubbenCommented:
You can't demote the Win2003 DC and remove the forest root domain (the first domain in the forest).

Built-in groups like schema admins and enterprise admins is only located in the forest root and can't be moved. If you want to remove the forest root, you'll have to build a new forest.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
Mike KlineCommented:
Snus is right, you can't remove the original root.  One thing I'd recommend is getting a second DC up in the forest root.   Just in case that one dies hard you have some redudancy.

Thanks

Mike
0
 
LunaRavenscroftAuthor Commented:
Is there any way that could be done on the second domain or do I have to basically start over? This was set up before I got here and the people that did it were not easy to deal with.
0
 
Mike KlineCommented:
Start over/migrate if you truly want to get rid of that forest root domain.

Thanks

Mike
0
 
snusgubbenCommented:
I'm afraid you'll have to start all over and setup a new forest. If you take away the root of a tree, the tree will hit the ground.

You can use migration tools like ADMT to move users and resources from your existing domain(s), or move back to your forest root domain.

And like Mike mentioned. You should have atlease two DCs, and especially in the forest root domain. You don't want to lose this domain.

0
 
LunaRavenscroftAuthor Commented:
I was afraid of that. I have these trusted and I wanted to get back to a single domain, but Exchange is on the new domain too so I guess I have some work to do. Thanks!
0
 
Mike KlineCommented:
Is the only reason you want to do this is to go to a single domain?  If that is basically now just an empty root I'd leave it as is.  Lots of those still exist.  To me it is not worth the effort of a migration to get rid of it.

Thanks

Mike
0
 
LunaRavenscroftAuthor Commented:
This server is still working but it is getting old. I got pretty much everything off of it but I am not sure what would happen if it dies on me, and if the boss man lets me buy a new one, I could then just get this whole mess fixed once and for all.
0
 
snusgubbenCommented:
Too bad they didn't make the new DC an additional DC in your original domain, if there was no need to make an additional domain.
0
 
LunaRavenscroftAuthor Commented:
At least I can get a learning experience out of it, even though I don't know if that is good or bad!
0
 
LunaRavenscroftAuthor Commented:
Thanks!
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 6
  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now