How to remove old DC from AD Connect/AD DS Services?

Mathews, Roger 1

An ailing on-prem domain controller was originally syncing to Azure. We exported the config and imported it into a new AD Connect instance on a different server. Sync services are health but in AD DS Services it is still referencing the old DC. How can I remove this and point it to the new server. The new server is not the Domain Naming master or the Schema master.

I have two DC's, both are global catalog servers.

2 answers

Dave Patrick 426.1K Reputation points MVP

2022-08-08T14:50:46.837+00:00

You can perform clean up to remove the remnants of old one.
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-metadata-cleanup
https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-manually-removing-a-domain-controller-server/ba-p/280564

--please don't forget to upvote and Accept as answer if the reply is helpful--
Please sign in to rate this answer.
Dave Patrick 426.1K Reputation points MVP

2022-08-08T19:42:28.337+00:00

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--

Mathews, Roger 1 Reputation point

2022-08-08T23:08:24.657+00:00

The old DC is still operational and hasn't been demoted yet. All operational roles have been transferred to the newest and stable DC. Before I demoted it, I wanted to make certain that Azure/AD was firing on all cylinders. Most everything is reporting great except the AD DS Services, still showing the old DC. Not sure if I fix this from Azure or the new DC or if I need to do something from the DC being taken out of service.

In Azure there is an option to delete the service for this server but the warnings are dire, "Warning! Deleting the service will delete all the data associated with the service. This action cannot be undone."

Dave Patrick 426.1K Reputation points MVP

2022-08-08T23:15:46.247+00:00

Ok, gotcha. You could follow along here.
https://www.starwindsoftware.com/blog/migrate-azure-ad-connect-to-a-new-server

--please don't forget to upvote and Accept as answer if the reply is helpful--

Dave Patrick 426.1K Reputation points MVP

2022-08-11T12:29:04.547+00:00

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--

Mathews, Roger 1 Reputation point

2022-08-13T02:12:59.45+00:00

Sorry for such a slow reply. I work for a school and we are in crash-n-burn mode.

Unfortunately I haven't had any success. I read the ref you mentioned at Starwindsoftware.com. Most of what they mention is the method I took in the process. The one step where I deviated is placing the old server into staging mode. Then putting the new server in production mode. I moved the AD Connect server without these instruction and instead of placing the old into staging, I removed AD Connect software, then brought the new server online into production. This is where I am now stuck. There is an option to remove the old server from Ad Connect/Azure Active Directory Connect Health/ AD DS Services but I just don't have enough info to know what is going to happen. I read on one article, it is not an issue or big deal yet read on another that when I do this, all devices enrolled into Azure will no longer be able to be logged into. Yikes. Clear as mud.

Dave Patrick 426.1K Reputation points MVP

2022-08-14T15:16:53.797+00:00

Maybe this one helps.
https://dirteam.com/sander/2021/04/26/knowledgebase-you-cannot-uninstall-azure-ad-connect-from-programs-and-features/

--please don't forget to upvote and Accept as answer if the reply is helpful--
Sign in to comment
BHARAT PATOLIYA 1 Reputation point

2022-08-09T16:28:17.283+00:00

Follow up
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-installation-and-removal-wizard-page-descriptions
Please sign in to rate this answer.

0 comments No comments
Sign in to comment