after demotion domain controller

O

om zeyad

hi all,

I had to forcely remove a domain controller named DC2 by stopping kdc service and then made a clean up metadata(keep in mind that I isolated dc02 in temp site with site have a subnet with the same IP of dc02 but with mask 32 bit this isolation was in 28-9-2018)

the demotion date was 29-9-2018


then I checked the dns I found in tcp in default first site under msdcs.mydomain.local zone

I found only DC1 i think that's great

but in my domain.local zone I found

name server record for dc02 with status unknown

also I found a record of dc02 in global catalog zone but with time stamp 27-9-2018

question

should i have to delete records manually and what records should i delete

is there a command that list all records in all zones with their records

attached the DNS records



1342397.png


1342399.png1342398.png

Continue reading...
 
Back
Top Bottom