<div>
<div class="content wysiwyg-content">
Dear Experts,<br />
<br />
I have gracefully demoted a domain controller, removed all AD DS roles including the DNS role. Under Sites and Services the demoted DC still exists, which can be normal and can be safely deleted hover under the demoted DC object is a &quot;msDNS-ServerSettings&quot; object, i font know if i can safely delete it? Microsoft (MSDN) mentions it is associated with the Key Master required for DNSSEC although no DNS zones within the domain use DNSSEC. Any ideas if I can delete the object manually and what impact if any it could cause?<br />
<br />
Domain/Forest Functional Level is Windows Server 2016, upgraded previously from Windows Server 2012 R2.<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/03_w11/1285700/Capture.JPG" target="_blank" class="file-inline" title="Capture.JPG (35 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>Capture.JPG</a>
</div>
</div>


Capture.JPG

Dear Experts,

I have gracefully demoted a domain controller, removed all AD DS roles including the DNS role. Under Sites and Services the demoted DC still exists, which can be normal and can be safely deleted hover under the demoted DC object is a "msDNS-ServerSettings" object, i font know if i can safely delete it? Microsoft (MSDN) mentions it is associated with the Key Master required for DNSSEC although no DNS zones within the domain use DNSSEC. Any ideas if I can delete the object manually and what impact if any it could cause?

Domain/Forest Functional Level is Windows Server 2016, upgraded previously from Windows Server 2012 R2.

msDNS-ServerSettings Object Deletion

Windows Server 2016 is the successor to Windows Server 2012 R2. Built upon the same core code as Windows 10, Windows Server 2016 brings enhancements in security, servicing, and connectivity. A particular focus on this release was hybrid-cloud scenarios, and has close ties to Azure and other Microsoft cloud initiatives. This does not detract from the many improvements that are available for on-premises-only deployments

Windows Server 2016 comes in Datacenter, Standard, and Essentials editions, and for servicing, has adopted windows 10's cumulative model. The new nano-server install is designed to be remotely managed and is designed to be kept current through continuous feature updates. The full GUI install operates similarly to windows 10's "Long Term Servicing Branch" (LTSB) model with cumulative security updates.

Windows Server 2016 has also shifted from a per-processor-and-CAL licensing model to a per-core-and CAL licensing model. This brings Windows Server's licensing more in line with Microsoft's other products and makes hybrid-cloud license planning easier as well.

Windows Server 2016

The Domain Name System (DNS) is a hierarchical, globally distributed system responsible for associating the name of a computer, service or other resource into an IP address for connecting to the Internet or a private network. Most prominently, it translates domain names to the numerical IP addresses needed for the purpose of computer services and devices worldwide.

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.