Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Retire Active Directory server

Posted on 2016-09-21
3
Medium Priority
?
100 Views
Last Modified: 2016-10-19
I want to retire the server that has my primary DNS and Active Directory Domain Controllers on it.  It is a 2012 R2 and I have 2 others with DNS and are Active directory Domain Controllers.  I ran the command nltest /dclist:domainname.local and it find all3 domain controllers with the one I want to retire listed with PDC.  I can't find a way to promote one of the other domain controllers to the primary.  How do I do that.  I don't want to remove the Primary until I have promoted on of the others.  

Also is there anything I need to do with the DNS servers.  The one I want to retire was created when the Active Directory role was installed.
0
Comment
Question by:lcfrederickson
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 17

Expert Comment

by:Ivan
ID: 41809173
Hi,

you need to move PDC role, and any other FSMO role, before you demote it.
How to do it by MS: https://technet.microsoft.com/en-us/library/cc816779(v=ws.10).aspx
or little more with pictures :)
http://www.rebeladmin.com/2014/11/step-by-step-guide-to-migrate-fsmo-roles-from-windows-2003-server-to-windows-2012-r2-server/

As for DNS, check if other servers have forwarders, and how is that configured, so you don't end up with no internet access.

Regards,
Ivan.
0
 
LVL 4

Accepted Solution

by:
El Fierro earned 2000 total points
ID: 41809192
did you verify all the FSMO roles?

Run this command:
netDOM /query FSMO

this guide should help you in the right direction
http://www.nogeekleftbehind.com/2013/05/28/powershell-move-ad-fsmo-roles-in-server-2012/
1
 

Author Comment

by:lcfrederickson
ID: 41811012
Ivan--got the PDC role moved to the new server.  The DNS has all the forward lookup Zones that the old server does except the old server lists <servername> and also <servername.domainname.local>  How do I get the servername.local in the new server or do I need to?
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Let's recap what we learned from yesterday's Skyport Systems webinar.
This tutorial will walk an individual through the process of installing of Data Protection Manager on a server running Windows Server 2012 R2, including the prerequisites. Microsoft .Net 3.5 is required. To install this feature, go to Server Manager…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question