Windows Forum

Ask something
Discussion Locked

Demoting Domain Controller

0 helpful
5 replies

by jlbpotter

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am going to demote a domain controller that is running Windows 2000 Active Directory. I have removed the FSMO roles that were assigned to it and the Global Catalog. Is there any thing I should check before I demote it and remove it from my domain? It was the 1st server in the domain. Thanks

5 replies

by curlergirl

In addition to making sure any FSMO roles and Global Catalog server roles are assigned to other DCs, you want to check to be sure that this server is not the only server in the domain running such crucial services as DNS, DHCP, WINS, etc., and that it is not part of an Exchange site. Of course, any other data or programs would also have to be moved to another server if you haven't already done so. Hope this helps!

by jlbpotter

I have checked all of those items. The only thing that I am seeing are that all of my clients are authenticating to that one when they log on. Is there a way to force them to authenticate against another server or will they automatically do that when I demote this one?

by joseph moore

"there a way to force them to authenticate against another server"
Do you have a Site set up in AD Sites & Services?
If not, do so, and put all of your user machines AND the current Global Catalogue server (the one you are NOT gonna run DCPROMO on) into the same Site.
That will then force the workstations to use this designated DC as the one to use for authentication.
Do that, reboot the workstations, make sure the SRV records in DNS look good, then run DCPROMO on the server you want to remove. That should take care of it.
hope this helps

This discussion is closed to new replies.