i need to stop the dns server service on one Domainc Controllers

[amarchi]

hi friends,

i need to stop the dns server service on one of 3 domain controllers

the dns at the moment it's running on all 3 dc with active directory integrated zone

d.controller A
d.controller B (fesmo role and C.G.)
d.controller C
i need to stop the dns on server A

I have removed it from the dhcp settings for the clients, leaving the others two
I have removed it from the tcpip settings for all the other servers,
leaving the others two

could I meet some problems? have I forgotten something?
thanks for your jewel help


Max

 

[wdoellefeld]

Are you looking at replacing or taking this machine out of service?

As long as the clients have the right settings (which it seems you did) then you can either shut the service off or uninstall DNS. If you do this I would think about demoting the server as well. AD depends quite a bit on DNS and its preferred to keep DNS active on domain controllers even if you don't actively "use" the DC for it.



FRCP

http://www.frcp.net

 

[amarchi]

yes, my goal it's to demote this D.C. to a member server.
I think that i will stop the dns service when i will demote the DC

thanks man

Max

 

[aftertaf]

no it wont.
run dcpromo to remove ad.

once done, you can remove the dns service with add/remove windows components

Aftertaf
if its not broken, fix it anyway - with luck you might break it and have an excuse

 

[amarchi]

here are the steps..
demote the dc using dcpromo
after that a will stop the service...and remove it with
the add/remove components

thanks

Max

 

[aftertaf]

exactly
when done, you'll have a member server without active directory, nor the DNS service

run dcpromo first, to make it leave active directory GRACEFULLY .

then you remove DNS Server from add/remove.
after a swift reboot, you should be laughing

Aftertaf
if its not broken, fix it anyway - with luck you might break it and have an excuse

 

[stupman]

I think it would be better to remove dns first ... AD integrated zone.
Make sure the server has one of the other two servers as sec dns server.
Then demote.

And might it fail - of which i'm sure will not be the case - you can kick that dc out of the AD manually by following Q216498.

Good luck.