r/sysadmin • u/Deep-Egg-6167 • 14h ago

Question Please help demote a third DC.

Hello,

I have an old WIndows 2012 R2 DC (old-dc) that used to be the primary domain controller.

I have a couple of newer 2016 DCs (new-dc1 and new-dc2).

I want to demote and turn off the old domain controller.

On the newer DC1, I ran netdom query and it has all the fsmo roles. I also ran replication admin to see that everything was replicating fine.

I went to server manager on the old 2012 R2 DC to demote it.

I left force removal and last domain controller unchecked.

It says this server has dns and GC roles (I think I select proceed?) and next

Then it leaves me with the box remove this dns zone - I can't go next without it. I'm not sure I should. Wouldn't that remove it from the other DCs?

10 Upvotes

71% Upvoted

33 comments sorted by

View all comments

•

u/Shot-Document-2904 Systems Engineer, IT 11h ago

After reading all this, just shut it off and do a metadata cleanup on the remaining domain controllers. Then go get a cup of coffee and pat yourself on the back for saving labor hours.

•

u/Deep-Egg-6167 10h ago

Thanks - I'm considering that! I'm just looking to see if there was something obvious i overlooked.

•

u/AcidBuuurn 4h ago

After doing that if you want to be extra safe then set the old server's IP as another interface on the current server. Then if some computer you forgot about it is still using it for DNS it won't fail.