Re: Demoting

From: Hank Arnold (rasilon_at_aol.com)
Date: 08/06/04


Date: Fri, 6 Aug 2004 05:35:12 -0400

I'd also take the original DC off line and make sure the network works
without it for a few days. If all is OK, then bring it back on line and
demote it. Another alternative I've seen is to stop NETLOGON service while
keeping it on line....

Of course, this assumes that the server is currently doing nothing other
than serving as a DC....

-- 
Regards,
Hank Arnold
"Steve" <s.simpson_no1spam@btopenworld.com> wrote in message
news:cerq29$gbu$1@hercules.btinternet.com...
> and transfer any FSMO roles it may be holding
>
> http://support.microsoft.com/default.aspx?kbid=255690
> tells how
> rgds
> Steve
>
>
>
> "ptwilliams" <ptw2001@hotmail.com> wrote in message
> news:ejLZq7meEHA.1652@TK2MSFTNGP10.phx.gbl...
> > No it will not.  Just ensure there are other DCs in place first, as well
> as
> > GCs.  And that you've got DNS elsewhere...
> >
> >
> > -- 
> >
> > Paul Williams
> > _________________________________________
> >  http://www.msresource.net
> >
> >
> > Join us in our new forums!
> >   http://forums.msresource.net
> > _________________________________________
> >
> >
> > "Joe at the Mint" <Joe at the Mint@discussions.microsoft.com> wrote in
> > message news:B51F4CAD-B8EA-4E25-9A18-5B8F9C1CF20E@microsoft.com...
> > I would like to demote a an old PDC (We brought in a new Server) without
> > disturbing a SQL accounting app. It would then be a member server on the
> new
> > domain.
> > Will Demoting the old server wipe my apps?
> >
> > "ptwilliams" wrote:
> >
> > > Not if there are other DCs.  If you only have one DC then yes.  I
meant
> > that
> > > if you demote a DC, all info. regarding *that* DC is removed from the
AD
> > > (which is stored on each of the other DCs).
> > >
> > > If you are looking to get an exact replica of your DC to put on an
> > isolated
> > > network to test things then cloning it is fine.  If you simply wish to
> > mimic
> > > the configuration so that you may deploy multiple DCs you will need to
> > > demote, clone, and then repromote each box.
> > >
> > > Does this better explain things?  So, in summary...Demoting removes
> *that*
> > > DC from the domain not user accounts, etc.  You should not clone a
live
> DC
> > > and deploy that clone elsewhere in the tree without demoting it first.
> If
> > > you wish to clone for testing in an isolated LAN or offline, then
> cloning
> > is
> > > fine.
> > >
> > > -- 
> > >
> > > Paul Williams
> > > _________________________________________
> > >  http://www.msresource.net
> > >
> > >
> > > Join us in our new forums!
> > >   http://forums.msresource.net
> > > _________________________________________
> > >
> > >
> > > <anonymous@discussions.microsoft.com> wrote in message
> > > news:b82401c4798b$0871d770$a301280a@phx.gbl...
> > > Paul,
> > >
> > > So, when I demote a DC, do I loose all the computer and
> > > user accounts in Active Directory?  That seems to defeat
> > > the purpose of cloning a DC for disaster recovery.  So,
> > > why should I even bother to clone a DC?  Please, correct
> > > me if I am wrong.
> > >
> > > Thanks
> > >
> > > >-----Original Message-----
> > > >When you demote it all info. regarding that DC is deleted.
> > > >
> > > >You should demote before cloning.  You should then
> > > repromote once imaged.
> > > >
> > > >You wouldn't want to be in a scenario whereby you have a
> > > clone of a live
> > > >DC!!!!
> > > >
> > > >
> > > >-- 
> > > >
> > > >Paul Williams
> > > >_________________________________________
> > > > http://www.msresource.net
> > > >
> > > >
> > > >Join us in our new forums!
> > > >  http://forums.msresource.net
> > > >_________________________________________
> > > >
> > > >
> > > >"Amir M." <anonymous@discussions.microsoft.com> wrote in
> > > message
> > > >news:9ad501c478cd$6ef33d40$a401280a@phx.gbl...
> > > >Hi,
> > > >
> > > >When using DCPromo to demote and then promote a DC, is
> > > >there anything in Active Directory that might be lost?
> > > >
> > > >According to Symantec, we should demote a DC when trying
> > > >to clone and then promote it after having restored the
> > > >image, when using V2i Protector Server Edition.  Has
> > > >anyone used this product to clone DC?
> > > >
> > > >Thanks
> > > >
> > > >
> > > >.
> > > >
> > >
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: Upgrade w2k
    ... will make new server with same SIDs, GUIDs, server names, IP addresses ... This can cause conflicts on the network... ... Now you take it offline and bring on the network another clone of this ... take it away from user's network and upgrade it. ...
    (microsoft.public.windows.server.general)
  • Re: Upgrade w2k
    ... tool and resource kit install on the server I am about to upgrade to w2k3, ... This can cause conflicts on the network... ... Now you take it offline and bring on the network another clone of this ...
    (microsoft.public.windows.server.general)
  • Re: removing second DC from forest
    ... in your network, also make sure that the DC is a GC: When do I do it before ... making DC offline or after. ... dcpromo to remove that server, just run dcpromo on the server (that you want ... After that you can use dcpromo to demote AD from that server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Demoting
    ... I would like to demote a an old PDC (We brought in a new Server) without disturbing a SQL accounting app. ... > DC from the domain not user accounts, ... You should not clone a live DC ...
    (microsoft.public.win2000.active_directory)
  • Re: Changing IP Address of W2K3 Domain Controllers
    ... Make sure dns is not running on the demoted server. ... Our department is currently using the 192.168.1 network and I'd like to change it to a 10.1 network, mostly to avoid conflicts with remote users having home networks in the 192.168 range. ... The dns question is one I hadn't thought about much up to now. ... Demote one of the DC's to a member server and have all fsmo roles on the other dc. ...
    (microsoft.public.windows.server.active_directory)