Closing a DC

[Guillaume Genest]

Hi,
I want to run dcpromo on a DC to set him to be a member
server and ultimately (few weeks later) remove it from
domain and send machine to scrap

I have several DC on my site, i check that none of the
FSMO role is on the computer i want to close.

I remove the global catalog role from it last week (2
other DC have Global Catalog Role). I want to know if i
can demote it without any trouble during the days?

How will act a user or a server that have been loggued
with this DC the morning if i close the DC during the day?
is it suppose to automaticly check on other DC for
security information and things like that?

What is the best practice? Am i supposed to do that on
week end and reboot all my windows server (its mean a lot
of server) to be sure i don't run into problem?

thanks!

 

[Paul Bergson]

You should have no problems, just do it towards the end of the day. We just
did the same thing last week, it was a non-event.

Make sure you aren't running - dns, dhcp, licensing or wins otherwise
clients might be impacted by that.

 

[Rebecca Chen [MSFT]]

Hi Guillaume,

As Paul has pointed out, if this server does play the dns, dhcp, licensing
or wins roles, I suggest you replicate DNS information to other DCs, backup
the DHCP, WINS database and the license.

Technically speaking, you can use the following process to demote the
win2k3 server:



Backup the whole win2k3 system to a network share or a tape in case you
need to restore the data.

Transfer DNS, DHCP, WINS etc from win2k3 to other DCs.
How to Restore a Corrupted DHCP Database File
http://support.microsoft.com/default.aspx?scid=kb;en-us;173396

Restoring a Windows 2000 WINS Database from Other Backup Sources
http://support.microsoft.com/default.aspx?scid=kb;en-us;244810

Make win2k as the Global Catalog like you have already done.
4. Transfer FSMO to from 2k3 to win2k
Using Ntdsutil.exe to seize or transfer FSMO roles to ad domain controller
http://support.microsoft.com/default.aspx?scid=kb;en-us;255504

5. Take win2k3 offline and run win2k for a period of time to make sure it
is functional.

The following article has addressed how to demote a DC:
238369 How to promote and demote domain controllers in Windows 2000
http://support.microsoft.com/?id=238369

If you have any questions, please feel free to post back.

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guillaume Genest]

Hi,
The Dc i want to close is a windows 2000 server, sorry
i didn't specified but i was thinking that is i post in
win2000.active_directory it talk by itself

The DC i want to close didn't have function of DHCP, WINS,
License or DNS.

So i can demote it anytime and i don't have to reboot
server and workstation?

 

[Paul Bergson]

You will have to reboot the dc that was reverted to a member server. That
is all. Everything else will be ok.

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Rebecca Chen [MSFT]]

Hi Guillaume ,

You are correct that this is the win2k newsgroup. Sorry for my typo, I
always talk about win2k3 recently.

However, it is the same when you remove a win2k or win2k3 DC from a samll
network . If the server does not play any critical role, please just go
ahead to demote it when it is online. Reboot the machine is the must after
the demotion and then all will be OK.

Please take a look the KB238369 I have provided is talking about how to
demote a win2k server, I believe it addressed this concern.

If you have further questions, please feel free to post back.

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guillaume Genest]

thanks a lot all,

i did it without any problems. thanks!
all that i have to do now is to remove it completly from
the domain this week.

thanks!

 

[Rebecca Chen [MSFT]]

That sounds great!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.