Demote DC - how to clean up records left in DNS and DFS

Question

Hey,

I have successfully demoted a DC. Repamin and replication tool show no signs of this server in DC replication. AD shows the object as Computer and not as DC.

1. In DNS, most of the forward lookup zones don't show the DC in the Name Servers tab however this server is still showing in these locations:
2. In DFS, the Site (Paris) is still showing as referral.
   
   

Can I simply delete the record from those DNS zones and DFS out right using the consoles or is it something from complicated?
Thanks, M

Answer 1

Should be fine to delete. Also check here.
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-metadata-cleanup
https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-manually-removing-a-domain-controller-server/ba-p/280564

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Hello @SenhorDolas ,

This is a common scenario, unfortunately.

I would suggest to run the next command to detect other orphaned entries:

ldifde -f ldifde.txt -s PROD-DC1 -d "dc=corpdom,dc=local" -r "(name=demotedDChostname)" -p subtree

After that, is safe to delete manually the records as long as all the FSMOs have been transferred to other DCs.

Hope this resolves your query,
Best regards,