Share via

Domain controller (maximum off time)

Angel Garcia Gomez 21 Reputation points
2020-09-15T16:26:21.607+00:00

Hello,

We have to depromote a DC and as a precaution to verify that everything works, we have an idea to turn it off for a week or two.

What is the maximum time that a DC can be off without problems of decoupling? 90 days?

I'm not sure how long that is.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,244 questions

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Leon Laude 85,726 Reputation points
    2020-09-15T16:59:49.95+00:00

    Hi @Angel Garcia Gomez ,

    By default it should be 60 days on older operating system versions, it may depend the operating system and Service pack level, on newer operating systems (Windows Server 2012 and later) the default is 180 days.

    24846-tombstone-defaults.png

    It is ultimately determined by the Tombstone Lifetime in the forest, you'll find some more information here:

    Determine the tombstone lifetime for the forest
    https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc784932(v=ws.10)

    ----------

    (If the reply was helpful please don't forget to upvote or accept as answer, thank you)

    Best regards,
    Leon

    1 person found this answer helpful.
    0 comments
  2. Thameur-BOURBITA 32,636 Reputation points
    2020-09-15T20:27:10.093+00:00

    Hi,
    Two week should be ok because tombstone lifetime is 60 days or more (it depend of domain controller operating system ).
    If a DC stay offline during a period exceeded the tombstone lifetime, it will be able to replicate with others replication partners and you have to demote it using metadata cleanup , rebuild it and promote it again.

    Please don't forget to mark this reply as answer if it help you to fix your issue

    0 comments
  3. Stephanie Yu 396 Reputation points
    2020-09-16T01:07:46.223+00:00

    Hello @Angel Garcia Gomez ,

    Thank you for posting here,

    Just like the previous two replies, your current operation will not have any impact. At the same time, you can also check the time of DC's tombstone lifetime and change the time. You can refer to the link below:

    https://www.windowstechno.com/how-can-i-check-the-tombstone-lifetime-of-my-active-directory-forest/

    Best regards,
    Stephanie Yu

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments