[Samba] demote ad dc

Andrew Bartlett abartlet at samba.org
Fri Aug 20 10:56:34 UTC 2021

On Fri, 2021-08-20 at 12:52 +0200, Andrea Ballarati via samba wrote:
> Hello,
> in my lan I have an ad dc samba and a file server that is ad dc too 
> (Version 4.11.6-Ubuntu).
> I know this configuration is not recommended and I want to demote the
> ad 
> dc file server to a simple domain member.
> What is the correct procedure to follow? I have googled a bit but 
> coudn't find any suitable instructions.

Samba doesn't really have a demote codepath.  You essentially start
from scratch again.  Yes, I know we have tools that 'demote', but it
won't get you a well-working domain member server.

In particular any idmapping won't be preserved, as the systems are

Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source

More information about the samba mailing list