Steps on decomissioning an AD domain

Posted on 2013-10-17
Medium Priority
Last Modified: 2013-10-21
I am currently working on a project to collapse an old domain of a company that we purchased several years ago and have since moved everything off.

To this point I have removed all of their domain controllers except the last one. I have checked the DNS console to see if any computers have registered entries. The last entry was some time back in 2011. All clients are getting their AD/DHCP/DNS/File Shares/etc from the new domain.

We currently have a forest trust configured with the domain I am about remove. Im thinking the trust should be removed before starting the DCpromo process. I was planning on breaking the trust from the domain we are keeping but not sure if it actually matters where I break the trust.

Are there any other things that I should be looking at? Or do you have a checklist for decomissioning an old domain?

Any help is appreciated.
Question by:Joseph Daly
1 Comment
LVL 53

Accepted Solution

Will Szymkowski earned 1500 total points
ID: 39579813
You should remove the trust from the old domain to new domain first, as you may get error messages when trying to decommission the old domain.

If this is the last domain in the forest you can simply use dcpromo to decommission the last domain controller. Just remmeber if you have a need to get back into the machine for any reason, make sure that you have a local admin account that you know the username and password to. If you do not create one before decommissioning.


Featured Post

Easily Design & Build Your Next Website

Squarespace’s all-in-one platform gives you everything you need to express yourself creatively online, whether it is with a domain, website, or online store. Get started with your free trial today, and when ready, take 10% off your first purchase with offer code 'EXPERTS'.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
The Windows Firewall provides an important layer of protection and a rich interface to configure it. Unfortunately, it lacks item level filtering. This article details my process of implementing firewall-as-code to reduce GPO bloat.
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

597 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question