Demote DC - how to clean up records left in DNS and DFS

SenhorDolas 1,031 Reputation points


I have successfully demoted a DC. Repamin and replication tool show no signs of this server in DC replication. AD shows the object as Computer and not as DC.

  1. In DNS, most of the forward lookup zones don't show the DC in the Name Servers tab however this server is still showing in these locations:
  2. In DFS, the Site (Paris) is still showing as referral.

Can I simply delete the record from those DNS zones and DFS out right using the consoles or is it something from complicated?
Thanks, M

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
4,327 questions
Windows DHCP
Windows DHCP
Windows: A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.DHCP: Dynamic Host Configuration Protocol (DHCP). A communications protocol that lets network administrators manage centrally and automate the assignment of Internet Protocol (IP) addresses in an organization's network.
965 questions
0 comments No comments
{count} votes

Accepted answer
  1. Dave Patrick 352.4K Reputation points MVP
    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Limitless Technology 37,771 Reputation points

    Hello @SenhorDolas ,

    This is a common scenario, unfortunately.

    I would suggest to run the next command to detect other orphaned entries:

    ldifde -f ldifde.txt -s PROD-DC1 -d "dc=corpdom,dc=local" -r "(name=demotedDChostname)" -p subtree

    After that, is safe to delete manually the records as long as all the FSMOs have been transferred to other DCs.

    Hope this resolves your query,
    Best regards,

    1 person found this answer helpful.
    0 comments No comments