Confusing issue in AD replication report from multiple DC

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

ASKER

So how do you do meta data cleanup ?

Is it just right click on the AD computer object then delete it.

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

ASKER

Hi Toni,

When we demote Windows Domain Controller 2012 R2, does the DNS or the DHCP server role gets removed as well ?

Because in the AD site this is the only DC, DNS integrated and DHCP is there any impact to the users ?

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

ASKER

Thanks Toni,

So after convert zones to standard primary I can then demote the domain controller safely ?

After that wait for few hours for AD replication and then promote it back to domain controller, then what happened to the DNS if I want it to be AD integrated mode again ?

Yes, but why would you have to wait few hours for replication?

ASKER

Or at least 15 minutes. Becasse that how Active Directory replication works in my company for those AD sites.

Is that Normal or something wrong that I need to investigate for there somewhere ?

If you assume, that replication traffic will overload your WAN link, you should consider this option:

Installing an Additional Domain Controller by Using IFM
https://technet.microsoft.com/en-us/library/cc816722(v=ws.10).aspx

Two things to consider, the size of the AD database (ntds.dit) and bandwidth of WAN link.

If you use IFM procedure, you can copy enitire database to DR location outside your normal business hours, install DC by IFM and there will bi minimal initial replication traffic.

ASKER

Tony,

I asumsi that the DNS server tile Will Aldo be automatically installed and running when promoting the new server as domain controller and Global Catalog ?

DNS will be automatically installed, Global catalog is one check box away.

ASKER

So if I demote and re-promote the broken Domain Controller what happens to the client authentication within the AD site ?

can they use the Domain Controller in another AD site ?

Of course.

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

ASKER

Many thanks Arnold for joining this discussion.

Yes, the existing DHCP scope, assign the DNS server one to itself and the other one to the Domain Controller in Data Center.

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

ASKER

No Arnold,

The Site Office only use it for DHCP and DNS (primary), File server isserved by NAS appliance.

Do you have a hub and spoke type scheme or a mesh?
How to verify and know it ?

SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

ASKER

Hi Arnold, I'm having a mesh topology, ok, somehow the decommission side effect gone wrong :-|

https://www.experts-exchange.com/questions/28710913/Workstations-lost-its-trust-relationship-with-AD-domain-after-the-only-DC-GC-in-the-AD-Site-is-demoted-but-still-have-multiple-other-DC-GC-in-Data-Center.html

One by one the workstations popping up the Error that the Trust Relationship has broken ?!?!

ASKER CERTIFIED SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.