Editing GSTN - Directory services DNS PRINT DHCP (section)

= Demote a working Domain Controller. =

<div style="margin-left:0cm;margin-right:0cm;">Follow this section if your DC is accessible and working. </div>* <div style="margin-left:1.247cm;margin-right:0cm;">Log into the DC you want to demote. </div>

* <div style="margin-left:1.247cm;margin-right:0cm;">Verify that the DC is not the last one remaining in the domain! </div>

* <div style="margin-left:1.247cm;margin-right:0cm;">Make sure this DC does not contain any [https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_(FSMO)_roles FSMO role]: </div>



<div style="color:#00000a;"></div>

<div style="color:#00000a;">To check FSMO roles hit below command.</div>

''<nowiki># /usr/local/samba/bin/samba-tool fsmo show</nowiki>''

== Transferring a FSMO Role  ==

* <div style="margin-left:1.247cm;margin-right:0cm;">Log on to the DC, that should be the new owner of the role you want to transfer. </div>

* <div style="margin-left:1.247cm;margin-right:0cm;">Transfer the role to the DC, by executing the following command: </div>



''<nowiki># /usr/local/samba/bin/samba-tool fsmo transfer --role=all</nowiki>''

Ensure that the role was transferred ('samba-tool fsmo show'). 

[[Image:GSTNDIRECTORY30.png]]

'''Demote the DC: '''

<div style="color:#00000a;">Run below command to demote dc.</div>

''<nowiki># /usr/local/samba/bin/samba-tool domain demote -Uadministrator</nowiki>''

<div style="color:#00000a;">Using spdc.gstntest.com as partner server for the demotion</div>

<div style="color:#00000a;">Password for [GSTNTEST\administrator]:</div>

<div style="color:#00000a;">Desactivating inbound replication</div>

<div style="color:#00000a;">Asking partner server spdc.gstntest.com to synchronize from us</div>

<div style="color:#00000a;">Changing userControl and container</div>

<div style="color:#00000a;">Demote successfull</div>


'''Demote a DC that isn't accessible any more'''


<div style="color:#00000a;">Follow this section if your DC is not accessible any more - e. g. by hardware failure - and it surely will never come back into the network. </div>

<div style="color:#00000a;">Run the following command on one of the remaining, working Domain Controllers: </div>

<div style="color:#00000a;"><nowiki>#</nowiki>'' /usr/local/samba/bin/samba-tool domain demote –remove-other-dead-server=sadc''</div>