demoting a domain controller

[imported_JFG]

is it better practice to transfer the roles manually or just run DCpromo and let AD do its thing?

Thanks

 

[stash]

Depends. If only have one other DC, I would just run dcpromo. If you have more than one and you want the roles to go to a specific machine, move them manually first.

 

[Diaonic]

I believe either will work.

Heres the article I read on it.

http://teamapproach.ca/trouble/FSMO.htm

 

[imported_JFG]

thanks. I have 3 other DC's and I figured I'd do it manually, I was just curious which way Microsoft gives its "best practice" stamp to. I'll probably feel better that I know the roles are transferred anyway before I demote.

 

[stash]

Best practice with multiple DCs is to manually move them. dcpromo will move them just fine on its own, you just don't get to decide where they go.

Best practice with only one other DC is to let dcpromo handle it.

You can save yourself the trouble of using three different snapins (one of which needs a dll to be registered) and transfer all the roles using ntdsutil. Make sure you transfer and not seize.