[Samba] Demoted dc not completely demoted, maybe?

Robert Wooden bob at donelsontrophy.com
Thu Mar 8 23:49:56 UTC 2018

I followed the "Demoting_a_Samba_AD_DC" on the Samba Wiki.

After demoting the online controller and receiving a "successful" notation
I scrolled down to the "Verifying The Demotion" via the listed Windows RSAT.

The controller was not listed as a domain controller any more. Only the
remaining two DC's appeared. Great!

The "Active Directory Sites and Services" still listed the old dc but,
there was no "NTDS Settings" listed as related to it. So, I right clicked
and deleted.

Then I began looking in the DNS Manager application and under "_
msdc.samdom.example.com" there are a lot of listing still showing the old
DC. First on the list is the "Start od Authority (SOA)" record. Many within
the "Forward lookup zone" under my domain name. Also under the "Reverse
Lookup Zones."

Will these DNS listings clear themselves with time or do I have a problem


Thank you.

Bob Wooden

More information about the samba mailing list