Closing a DC

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi,
I want to run dcpromo on a DC to set him to be a member
server and ultimately (few weeks later) remove it from
domain and send machine to scrap

I have several DC on my site, i check that none of the
FSMO role is on the computer i want to close.

I remove the global catalog role from it last week (2
other DC have Global Catalog Role). I want to know if i
can demote it without any trouble during the days?

How will act a user or a server that have been loggued
with this DC the morning if i close the DC during the day?
is it suppose to automaticly check on other DC for
security information and things like that?

What is the best practice? Am i supposed to do that on
week end and reboot all my windows server (its mean a lot
of server) to be sure i don't run into problem?

thanks!

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

You should have no problems, just do it towards the end of the day. We just
did the same thing last week, it was a non-event.

Make sure you aren't running - dns, dhcp, licensing or wins otherwise
clients might be impacted by that.

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.



"Guillaume Genest" <Guillaume.Genest@qc.teknion.com> wrote in message
news:053501c52eec$33b2e9d0$a601280a@phx.gbl...
> Hi,
> I want to run dcpromo on a DC to set him to be a member
> server and ultimately (few weeks later) remove it from
> domain and send machine to scrap
>
> I have several DC on my site, i check that none of the
> FSMO role is on the computer i want to close.
>
> I remove the global catalog role from it last week (2
> other DC have Global Catalog Role). I want to know if i
> can demote it without any trouble during the days?
>
> How will act a user or a server that have been loggued
> with this DC the morning if i close the DC during the day?
> is it suppose to automaticly check on other DC for
> security information and things like that?
>
> What is the best practice? Am i supposed to do that on
> week end and reboot all my windows server (its mean a lot
> of server) to be sure i don't run into problem?
>
> thanks!
>

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi Guillaume,

As Paul has pointed out, if this server does play the dns, dhcp, licensing
or wins roles, I suggest you replicate DNS information to other DCs, backup
the DHCP, WINS database and the license.

Technically speaking, you can use the following process to demote the
win2k3 server:



Backup the whole win2k3 system to a network share or a tape in case you
need to restore the data.

Transfer DNS, DHCP, WINS etc from win2k3 to other DCs.
How to Restore a Corrupted DHCP Database File
http://support.microsoft.com/default.aspx?scid=kb;en-us;173396

Restoring a Windows 2000 WINS Database from Other Backup Sources
http://support.microsoft.com/default.aspx?scid=kb;en-us;244810

Make win2k as the Global Catalog like you have already done.
4. Transfer FSMO to from 2k3 to win2k
Using Ntdsutil.exe to seize or transfer FSMO roles to ad domain controller
http://support.microsoft.com/default.aspx?scid=kb;en-us;255504

5. Take win2k3 offline and run win2k for a period of time to make sure it
is functional.

The following article has addressed how to demote a DC:
238369 How to promote and demote domain controllers in Windows 2000
http://support.microsoft.com/?id=238369

If you have any questions, please feel free to post back.

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi,
The Dc i want to close is a windows 2000 server, sorry
i didn't specified but i was thinking that is i post in
win2000.active_directory it talk by itself

The DC i want to close didn't have function of DHCP, WINS,
License or DNS.

So i can demote it anytime and i don't have to reboot
server and workstation?

>-----Original Message-----
>Hi Guillaume,
>
>As Paul has pointed out, if this server does play the
dns, dhcp, licensing
>or wins roles, I suggest you replicate DNS information to
other DCs, backup
>the DHCP, WINS database and the license.
>
>Technically speaking, you can use the following process
to demote the
>win2k3 server:
>
>
>
> Backup the whole win2k3 system to a network share
or a tape in case you
>need to restore the data.
>
> Transfer DNS, DHCP, WINS etc from win2k3 to other
DCs.
>How to Restore a Corrupted DHCP Database File
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;173396
>
>Restoring a Windows 2000 WINS Database from Other Backup
Sources
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;244810
>
> Make win2k as the Global Catalog like you have
already done.
>4. Transfer FSMO to from 2k3 to win2k
>Using Ntdsutil.exe to seize or transfer FSMO roles to ad
domain controller
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;255504
>
>5. Take win2k3 offline and run win2k for a period of time
to make sure it
>is functional.
>
>The following article has addressed how to demote a DC:
>238369 How to promote and demote domain controllers in
Windows 2000
>http://support.microsoft.com/?id=238369
>
>If you have any questions, please feel free to post back.
>
>Best regards,
>
>Rebecca Chen
>
>MCSE2000 MCDBA CCNA
>
>
>Microsoft Online Partner Support
>Get Secure! - www.microsoft.com/security
>
>=====================================================
>
>When responding to posts, please "Reply to Group" via
your newsreader so
>that others may learn and benefit from your issue.
>
>=====================================================
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>.
>

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

You will have to reboot the dc that was reverted to a member server. That
is all. Everything else will be ok.

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.



"Guillaume Genest" <Guillaume.Genest@qc.teknion.com> wrote in message
news:0c6a01c52fb5$53c2f980$a601280a@phx.gbl...
> Hi,
> The Dc i want to close is a windows 2000 server, sorry
> i didn't specified but i was thinking that is i post in
> win2000.active_directory it talk by itself
>
> The DC i want to close didn't have function of DHCP, WINS,
> License or DNS.
>
> So i can demote it anytime and i don't have to reboot
> server and workstation?
>
> >-----Original Message-----
> >Hi Guillaume,
> >
> >As Paul has pointed out, if this server does play the
> dns, dhcp, licensing
> >or wins roles, I suggest you replicate DNS information to
> other DCs, backup
> >the DHCP, WINS database and the license.
> >
> >Technically speaking, you can use the following process
> to demote the
> >win2k3 server:
> >
> >
> >
> > Backup the whole win2k3 system to a network share
> or a tape in case you
> >need to restore the data.
> >
> > Transfer DNS, DHCP, WINS etc from win2k3 to other
> DCs.
> >How to Restore a Corrupted DHCP Database File
> >http://support.microsoft.com/default.aspx?scid=kb;en-
> us;173396
> >
> >Restoring a Windows 2000 WINS Database from Other Backup
> Sources
> >http://support.microsoft.com/default.aspx?scid=kb;en-
> us;244810
> >
> > Make win2k as the Global Catalog like you have
> already done.
> >4. Transfer FSMO to from 2k3 to win2k
> >Using Ntdsutil.exe to seize or transfer FSMO roles to ad
> domain controller
> >http://support.microsoft.com/default.aspx?scid=kb;en-
> us;255504
> >
> >5. Take win2k3 offline and run win2k for a period of time
> to make sure it
> >is functional.
> >
> >The following article has addressed how to demote a DC:
> >238369 How to promote and demote domain controllers in
> Windows 2000
> >http://support.microsoft.com/?id=238369
> >
> >If you have any questions, please feel free to post back.
> >
> >Best regards,
> >
> >Rebecca Chen
> >
> >MCSE2000 MCDBA CCNA
> >
> >
> >Microsoft Online Partner Support
> >Get Secure! - www.microsoft.com/security
> >
> >=====================================================
> >
> >When responding to posts, please "Reply to Group" via
> your newsreader so
> >that others may learn and benefit from your issue.
> >
> >=====================================================
> >This posting is provided "AS IS" with no warranties, and
> confers no rights.
> >
> >.
> >

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi Guillaume ,

You are correct that this is the win2k newsgroup. Sorry for my typo, I
always talk about win2k3 recently.

However, it is the same when you remove a win2k or win2k3 DC from a samll
network . If the server does not play any critical role, please just go
ahead to demote it when it is online. Reboot the machine is the must after
the demotion and then all will be OK.

Please take a look the KB238369 I have provided is talking about how to
demote a win2k server, I believe it addressed this concern.

If you have further questions, please feel free to post back.

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

thanks a lot all,

i did it without any problems. thanks!
all that i have to do now is to remove it completly from
the domain this week.

thanks!

>-----Original Message-----
>Hi,
> I want to run dcpromo on a DC to set him to be a
member
>server and ultimately (few weeks later) remove it from
>domain and send machine to scrap
>
>I have several DC on my site, i check that none of the
>FSMO role is on the computer i want to close.
>
>I remove the global catalog role from it last week (2
>other DC have Global Catalog Role). I want to know if i
>can demote it without any trouble during the days?
>
> How will act a user or a server that have been loggued
>with this DC the morning if i close the DC during the
day?
>is it suppose to automaticly check on other DC for
>security information and things like that?
>
> What is the best practice? Am i supposed to do that on
>week end and reboot all my windows server (its mean a lot
>of server) to be sure i don't run into problem?
>
>thanks!
>
>.
>

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

That sounds great!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.