ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Preparing to Decommission a DC, Exchange 2010 Shows it is Exclusively Using it as DC and GC

    Scheduled Pinned Locked Moved IT Discussion
    23 Posts 4 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DashrenderD
      Dashrender
      last edited by

      This thread has several trouble shooting tips
      https://social.technet.microsoft.com/Forums/exchange/en-US/62269213-6034-4c60-9b69-37eb302f5e5b/how-to-set-new-default-domain-controller-for-exchange?forum=exchange2010

      1 Reply Last reply Reply Quote 1
      • wrx7mW
        wrx7m
        last edited by

        This is the Exchange management console window you get when you click "Modify Configuration Domain Controller"
        0_1459278630245_Capture91.JPG

        This is the output when running the Get-ADServerSettings | fl command in EMS to see the servers Exchange is using
        0_1459278645598_Capture92.JPG

        1 Reply Last reply Reply Quote 0
        • DashrenderD
          Dashrender
          last edited by

          Assuming you can afford a little downtime,

          What happens when you unplug the old AD from the network?

          Also, do the new DC's only point to each other for DNS? or do either of them point to the old AD box for DNS?

          wrx7mW 1 Reply Last reply Reply Quote 0
          • wrx7mW
            wrx7m @Dashrender
            last edited by

            @Dashrender Currently, they point to each of the others. FP01 is the server that will be decommissioned.

            On DC03:
            Preferred- FP0 1
            Alternate- DC03
            Tertiary- DC01

            On DC01:
            Preferred- DC03
            Alternate- DC01
            Tertiary- FP01

            On FP01 (to be decommissioned):
            Preferred- DC03
            Alternate- FP01
            Tertiary- DC01

            1 Reply Last reply Reply Quote 0
            • DashrenderD
              Dashrender
              last edited by

              I'd start by removing FP01 from all DNS entries everywhere.
              Again, double check DNS entries on the Exchange server itself - make sure it's not looking to FP01.

              Then open a command prompt, type NSLOOKUP and see what it uses as a server - should be whatever your primary DNS is, close the window.

              Now unplug the FP01 server from the network and see What exchange does - if it works as desired, you're done. Plug the server back in, DCPromo it down.

              I just ran the

               Get-ADServerSettings | fl
              

              command and it showed me two different AD servers for the different roles listed. Also, I have retired an AD since I installed Exchange and it never skipped a beat.

              wrx7mW 1 Reply Last reply Reply Quote 0
              • wrx7mW
                wrx7m @Dashrender
                last edited by

                @Dashrender said:

                I'd start by removing FP01 from all DNS entries everywhere.
                Again, double check DNS entries on the Exchange server itself - make sure it's not looking to FP01.

                Then open a command prompt, type NSLOOKUP and see what it uses as a server - should be whatever your primary DNS is, close the window.

                Now unplug the FP01 server from the network and see What exchange does - if it works as desired, you're done. Plug the server back in, DCPromo it down.

                I just ran the

                 Get-ADServerSettings | fl
                

                command and it showed me two different AD servers for the different roles listed. Also, I have retired an AD since I installed Exchange and it never skipped a beat.

                The exchange server doesn't have FP01 specified in the NIC properties but, as indicated, it is the only server showing up when running the Get-ADServerSettings | fl command.

                I have also checked the event log for event ID 2080 and found that Exchange sees all 3 of the DCs. I did find that the SACL Right was not set correctly on DC01 and DC03. A result of them having been added after the Exchange server. I modified the default domain controllers GPO to apply the correct permissions by adding the Exchange servers group to the "Manage auditing and security log" setting. Now the 2080 shows the SACL right as 1 for all DCs.

                I don't know whether or not that has any bearing on the reason I posted because I have run the Get-ADServerSettings | fl command since the changes and it still only shows the FP01 server as the default.

                1 Reply Last reply Reply Quote 0
                • DashrenderD
                  Dashrender
                  last edited by

                  As long as FP01 is online, why would you ever expect the response to Get-ADServerSettings to change?

                  For example, when you login from your workstation, the logon server is who your computer goes to for AD stuff until it's unavailable. I wouldn't expect anything different in Exchange.

                  JaredBuschJ wrx7mW 2 Replies Last reply Reply Quote 1
                  • JaredBuschJ
                    JaredBusch @Dashrender
                    last edited by JaredBusch

                    @Dashrender said:

                    As long as FP01 is online, why would you ever expect the response to Get-ADServerSettings to change?

                    For example, when you login from your workstation, the logon server is who your computer goes to for AD stuff until it's unavailable. I wouldn't expect anything different in Exchange.

                    This is what I would do first.

                    Shut down DC and Exchange. The leaving the old DC off, turn Exchange back on.

                    Then see what you get.

                    DashrenderD 1 Reply Last reply Reply Quote 1
                    • wrx7mW
                      wrx7m @Dashrender
                      last edited by

                      @Dashrender said:

                      As long as FP01 is online, why would you ever expect the response to Get-ADServerSettings to change?

                      For example, when you login from your workstation, the logon server is who your computer goes to for AD stuff until it's unavailable. I wouldn't expect anything different in Exchange.

                      I was thinking that the following window would show all available DCs, not just one. Is that a thing?

                      0_1459300221194_Capture93.JPG

                      DashrenderD 1 Reply Last reply Reply Quote 0
                      • DashrenderD
                        Dashrender @JaredBusch
                        last edited by

                        @JaredBusch said:

                        @Dashrender said:

                        As long as FP01 is online, why would you ever expect the response to Get-ADServerSettings to change?

                        For example, when you login from your workstation, the logon server is who your computer goes to for AD stuff until it's unavailable. I wouldn't expect anything different in Exchange.

                        This is what I would do first.

                        Shut down DC and Exchange. The leaving the old DC of, turn Exchange back on.

                        Then see what you get.

                        Definitely an idea - do you think the reboot of Exchange will or should make a difference?

                        JaredBuschJ 1 Reply Last reply Reply Quote 0
                        • DashrenderD
                          Dashrender @wrx7m
                          last edited by

                          @wrx7m said:

                          @Dashrender said:

                          As long as FP01 is online, why would you ever expect the response to Get-ADServerSettings to change?

                          For example, when you login from your workstation, the logon server is who your computer goes to for AD stuff until it's unavailable. I wouldn't expect anything different in Exchange.

                          I was thinking that the following window would show all available DCs, not just one. Is that a thing?

                          Let me see if I can get to mine and look

                          1 Reply Last reply Reply Quote 1
                          • JaredBuschJ
                            JaredBusch @Dashrender
                            last edited by

                            @Dashrender said:

                            @JaredBusch said:

                            @Dashrender said:

                            As long as FP01 is online, why would you ever expect the response to Get-ADServerSettings to change?

                            For example, when you login from your workstation, the logon server is who your computer goes to for AD stuff until it's unavailable. I wouldn't expect anything different in Exchange.

                            This is what I would do first.

                            Shut down DC and Exchange. The leaving the old DC of, turn Exchange back on.

                            Then see what you get.

                            Definitely an idea - do you think the reboot of Exchange will or should make a difference?

                            Well, it will force it to auth to a different DC. He stated before that he had no mail while the old DC was down.

                            1 Reply Last reply Reply Quote 1
                            • wrx7mW
                              wrx7m
                              last edited by

                              I will have to try the method @JaredBusch suggested when I have the ability to take the systems down.

                              1 Reply Last reply Reply Quote 0
                              • DashrenderD
                                Dashrender
                                last edited by

                                well, looks like mine does show both my AD servers and GCs.

                                0_1459303349511_exchange.JPG

                                wrx7mW 1 Reply Last reply Reply Quote 1
                                • wrx7mW
                                  wrx7m @Dashrender
                                  last edited by

                                  @Dashrender Interesting. I would try restarting the topology service on my Exchange server to see what happens but there are about 8 other services that are dependent on that. I am going to see if I can get away with doing it tonight or this weekend.

                                  1 Reply Last reply Reply Quote 0
                                  • 1
                                  • 2
                                  • 1 / 2
                                  • First post
                                    Last post