how to configure new system to eliminate any risk problem with existing domain?
You can minimize risk by always having two or more domain controllers. In the event of a domain controller failure you can seize roles (if necessary) to another healthy one
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/transfer-or-seize-fsmo-roles-in-ad-ds
then perform clean up to remove remnants of failed one.
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-metadata-cleanup
https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-manually-removing-a-domain-controller-server/ba-p/280564
then simply rebuild the failed one.
--please don't forget to upvote and Accept as answer if the reply is helpful--