I have gracefully demoted a domain controller, removed all AD DS roles including the DNS role. Under Sites and Services the demoted DC still exists, which can be normal and can be safely deleted hover under the demoted DC object is a "msDNS-ServerSettings" object, i font know if i can safely delete it? Microsoft (MSDN) mentions it is associated with the Key Master required for DNSSEC although no DNS zones within the domain use DNSSEC. Any ideas if I can delete the object manually and what impact if any it could cause?
Domain/Forest Functional Level is Windows Server 2016, upgraded previously from Windows Server 2012 R2.