best practice to removing DC from Site that no longer connects via vpn in another city

Posted by dasko on Server Fault See other posts from Server Fault or by dasko
Published on 2010-02-07T02:19:51Z Indexed on 2010/03/24 19:03 UTC
Read the original article Hit count: 645

hi i am looking for a recap of what i have done already to see if i missed anything.

i had two cities connected by wan using a ipsec persistent tunnel between gateways.

i had one DC (DOMAIN CONTROLLER) in each city that was a global catalog server (GC)

they were set up to replicate and i had them configured under Sites and Servers with their own subnet etc...

about 6 months ago the one city was removed and i was not able to gracefully remove, through dcpromo, the server that was there. it is no longer used and cannot be brought back. the company went from two sites down to single site. Problem is i had a whole bunch of kcc errors and replication bugs in the event viewer.

i wanted to clean up my active directory and decided to use the ntdsutil metadata cleanup commands.

i removed the server from the specifed site based on a procedure from petri website. I then removed the instances of the old DC and site from Sites and Servers. Then i went and cleaned up the DNS by removing Host A records, NS server name from both the local DNS forward lookup zone and the _msdcs

i also removed the reverse lookup zone for the subnet that no longer exists.

is there anything i missed? thanks in advance for any help. gd

© Server Fault or respective owner

Related posts about domain-controller

Related posts about active-directory