Metadata Cleanup of a Domain controller - SERVER 2012R2

Nabeel 26 Reputation points
2021-01-01T12:26:26.057+00:00

Hi,

For Server 2012R2: After a DC is dead, we have to use the following to cleanup metadata:

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-metadata-cleanup

As far I understand, this will not remove the DNS records of this dead domain controller. We have to remove the DNS records manually.

Do we also have to delete DNS records in root domain (example.com) of DNS? Or do we only delete the DNS records from _msdcs.root domain ( _msdcs.example.com)? As far as I understand, there are always two zones for domain example.com:
example.com and _msdcs.example.com

52735-capture.png

Windows for business Windows Client for IT Pros Directory services Active Directory
Windows for business Windows Client for IT Pros Networking Network connectivity and file sharing
Windows for business Windows Server User experience Other
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Anonymous
    2021-01-01T13:35:51.89+00:00

    This one may help to that end.
    https://devblogs.microsoft.com/scripting/clean-up-domain-controller-dns-records-with-powershell/

    --please don't forget to Accept as answer if the reply is helpful--

    0 comments No comments

  2. Thameur-BOURBITA 36,261 Reputation points Moderator
    2021-01-03T18:17:26.417+00:00

    Hi,

    As far I understand, this will not remove the DNS records of this dead domain controller. We have to remove the DNS records manually.

    Some DNS records can't be deleted automatically, you have to check and cleanup DNS records manually (NS,SRV,A,AAAA).

    Do we also have to delete DNS records in root domain (example.com) of DNS? Or do we only delete the DNS records from _msdcs.root domain ( _msdcs.example.com)? As far as I understand, there are always two zones for domain example.com:
    example.com and _msdcs.example.com

    Yes you should delete all DNS records of deleted domain controller in the different domains example.com and _msdcs.example.com.


    Please don't forget to mark helpful reply as answer

    0 comments No comments

  3. Vicky Wang 2,736 Reputation points
    2021-01-06T08:15:26.377+00:00

    Hi,

    Just checking in to see if the information provided was helpful.

    Please let us know if you would like further assistance.

    Best Regards,
    Vicky

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.