Here is my situation:
I have inherited a Windows 2003 domain with only 1 domain controller, we'll call it DC1. DC1 is also the DNS, DHCP and Exchange server for this organization. DC1 was originally a Small Business Server but was upgraded to Server 2003 Standard at some point.
There used to be a second domain controller and DNS server called DC2, but it crashed and was never removed cleanly from the domain. I have used ntdsutil to remove DC2 metadata and have deleted the computer account in Active Directory, but Name Server (NS) and Start of Authority (SOA) references to DC2 are scattered all over my DNS Forward Lookup Zone.
I have a brand new Exchange 2007 server on the way to replace what is currently DC1 (Exchange 2003, DNS, DHCP, DC). I therefore need to complete the following tasks:
- Promote a new server on the domain to be a domain controller.
- Transfer the FSMO roles from DC1 to the new domain controller.
- Install DNS and DHCP on the new domain controller.
- Remove the DNS and DHCP roles from DC1 and remove it from the domain.
- After my new Exchange 2007 server is in place, reload DC1 and turn it into a secondary domain controller and DNS server.
I am worried that in step 3 of my plan, I will end up replicating bad DNS records to my new domain controller. What is the best way to clean up my existing DNS before replicating it to my new server? It seems like it would be best just to have a clean Forward Lookup Zone, but I don't really understand how that zone works.
I already have DNS scavenging turned on, but it never seems to clean up any of the references to DC2, the domain controller and DNS server that failed some time ago. Can I just delete the entire Forward Lookup Zone? Does it recreate itself?
Can somebody explain to me what the different containers (_msdcs,domain.local,zone.domain.local) in the Forward Lookup Zone are?