Avatar of Albert Widjaja
Albert Widjaja
Flag for Australia asked on

Demoting old remnants of Domain Controller from Active Directory

Hi All,

When I perform the repadmin /replsum command, I can see there is an error pointing to the oldDC12.domain.com ?

And also when I do netdom query dc command the old DC is still there.

How can I safely decommission it without causing any issue with Exchange and AD replication ?
Active DirectoryDomain ControllerExchangeMicrosoft Server OS

Avatar of undefined
Last Comment
Albert Widjaja

8/22/2022 - Mon
Nagendra Pratap Singh

What is the EXACT error?
Albert Widjaja

ASKER
The replication error.

Pretty much the Domain controller has been turned off or not properly decommissioned. So how do I clean it up safely ?
ASKER CERTIFIED SOLUTION
DrDave242

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Albert Widjaja

ASKER
Thanks Dave.

So I assume that the normal AD replication and Exchange is not impacted when I remove this old DC remnants.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
SOLUTION
DrDave242

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Albert Widjaja

ASKER
Thanks !
Albert Widjaja

ASKER
Hi DAve,

which path should I choose ?

To clean up server metadata by using Active Directory Users and Computers
or
To clean up server metadata by using Active Directory Sites and Services

or do I follow both steps ?
DrDave242

Clean it up using AD Users and Computers first. Once that's done, launch AD Sites and Services. The deleted server will probably still be listed there, but it'll be just an empty container - there won't be an NTDS Settings object inside it. Delete the server from there as well.

You may also need to delete DNS records referring to the server after that. In my experience, the metadata cleanup sometimes removes these records but not always, and I'm not sure why it's inconsistent.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Albert Widjaja

ASKER
Ok that does make sense.
Thank you once again.