[cifs-protocol] [REG:115092113181636] [REG: 115092113181636 ] MS-DRSR 4.1.18.2 Server Behavior of the IDL_DRSRemoveDsServer Method missing RODC KDC removal

[Obaid Farooqi]

Hi Andrew:
I'll help you with this issue and will be in touch as soon as I have an answer.

Regards,
Obaid Farooqi
Escalation Engineer | Microsoft

Exceeding your expectations is my highest priority.  If you would like to provide feedback on your case you may contact my manager at nkang at Microsoft dot com

-----Original Message-----
From: "Tarun Chopra" <Tarun.Chopra at microsoft.com> 
Sent: Sunday, September 20, 2015 11:42 PM
To: "Andrew Bartlett" <abartlet at samba.org>
Cc: "cifs-protocol at lists.samba.org" <cifs-protocol at lists.samba.org>; "MSSolve Case Email" <casemail at microsoft.com>
Subject: [REG:115092113181636] [REG: 115092113181636 ] MS-DRSR 4.1.18.2 Server Behavior of the IDL_DRSRemoveDsServer Method missing RODC KDC removal

Hello Andrew - 

We have created a case to track ; 115092113181636; your query and a support engineer will be in touch by tomorrow. 

Thanks
Tarun Chopra. 

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org]
Sent: Sunday, September 20, 2015 9:06 PM
To: Interoperability Documentation Help <dochelp at microsoft.com>
Cc: cifs-protocol at lists.samba.org
Subject: MS-DRSR 4.1.18.2 Server Behavior of the IDL_DRSRemoveDsServer Method missing RODC KDC removal 

In "MS-DRSR 4.1.18.2 Server Behavior of the IDL_DRSRemoveDsServer Method" 

This mentions how to remove the ridSetReferences, but not the RODC KDC users created and linked via the msDS-KrbTgtLink value on the DC object.

Please correct, as my testing against Windows 2008R2 shows that these are removed by this call. 

While you are checking, can you confirm if any other details are removed server-side that are not currently documented? 

Thanks, 

Andrew Bartlett
--
Andrew Bartlett
https://samba.org/~abartlet/ 
Authentication Developer, Samba Team         https://samba.org 
Samba Development and Support, Catalyst IT https://catalyst.net.nz/services/samba