Link to home
Start Free TrialLog in
Avatar of Albert Widjaja
Albert WidjajaFlag for Australia

asked on

Demoting old remnants of Domain Controller from Active Directory

Hi All,

When I perform the repadmin /replsum command, I can see there is an error pointing to the oldDC12.domain.com ?

And also when I do netdom query dc command the old DC is still there.

How can I safely decommission it without causing any issue with Exchange and AD replication ?
Avatar of Nagendra Pratap Singh
Nagendra Pratap Singh
Flag of Australia image

What is the EXACT error?
Avatar of Albert Widjaja

ASKER

The replication error.

Pretty much the Domain controller has been turned off or not properly decommissioned. So how do I clean it up safely ?
ASKER CERTIFIED SOLUTION
Avatar of DrDave242
DrDave242
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks Dave.

So I assume that the normal AD replication and Exchange is not impacted when I remove this old DC remnants.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks !
Hi DAve,

which path should I choose ?

To clean up server metadata by using Active Directory Users and Computers
or
To clean up server metadata by using Active Directory Sites and Services

or do I follow both steps ?
Clean it up using AD Users and Computers first. Once that's done, launch AD Sites and Services. The deleted server will probably still be listed there, but it'll be just an empty container - there won't be an NTDS Settings object inside it. Delete the server from there as well.

You may also need to delete DNS records referring to the server after that. In my experience, the metadata cleanup sometimes removes these records but not always, and I'm not sure why it's inconsistent.
Ok that does make sense.
Thank you once again.