Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a Windows 2008 domain, with a Windows 2008 Backup domain controller that is nearing end of life.

What is the proper way to demote or inform Active Directory that the server is going to be removed from the domain.

share|improve this question
Backup Domain Controllers ceased to exist with Windows 2000... – Massimo Oct 15 '09 at 18:12

As others have said:

BDC's haven't existed since Windows NT 4.

If this DC was the second or subsequent DC in the domain, and if you have not manually moved any of the FSMO roles to it, then running dcpromo is all that is required to demote it. If you have manually moved any of the FSMO roles to it you'll want to move them to another DC before running dcpromo.

If this DC was the first DC installed in the domain, and if you have not manually moved any of the FSMO roles to another DC, and if you have another DC, and if all DC's are operating normally, then the dcpromo process will handle moving the FSMO roles to another DC without any intervention from you.

In most cases, no manual moving of the FSMO roles is neccessary unless you have a need for a particular role to be on another server or you're recovering from some type of DC crash on a DC that holds any of the roles.

share|improve this answer
+1 for FSMO roles, also be sure to migrate any other services from it. – Le Comte du Merde-fou Oct 15 '09 at 18:52

You should also bring another DC online before starting the whole process.

Then you need to make sure it is not a role holder or performing any services. Then simply run dcpromo and remove it from the domain.

share|improve this answer

As others have said, running DCPROMO should be enough to properly remove that DC from the domain.

If the DC is a DNS server, you should take care that

  • One or more other DCs are also DNS server
  • Domain computers are configured to use those DCs as their DNS servers
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.