How to Demote a Long-Disconnected Domain Controller

Just looking back on some old notes.

Found out nearly 4 years ago that I had to reconnect a branch office Windows Server 2003 domain controller that had a reasonable amount of data (in DFS) and apps on it and I had a weekend in which to do it. A re-install would have been pushing it. Especially the DFS replication (don't even ask about the backups...).

I distinctly remember at the time that there wasn't anything on TechNet, except one of those teaser PowerPoint presentations saying how Windows Server 2003 had better support for long-disconnected domain controllers (which I can no longer seem to find with Google. Hmph.).

Some of my Kerberos experience on FreeBSD and - at that time - my new-found knowledge of pointing Google at Microsoft to search for useful information helped me to try to understand what was going on.

After having a good guess of what I thought was wrong and running down some dead-ends, I ended up surprising myself when the following process worked:

• Change tombstone on FSMO DC to 180 days
• Push out changes from FSMO DC to other DCs using replmon
• Remove GC role from long-disconnected DC on both FSMO DC and on long-disconnected DC using AD Sites and Services
• Push out changes from FSMO DC to other DCs using replmon
• Stop and Disable KDC on long-disconnected DC
• Use netdom to reset machine account password for long-disconnected DC on FSMO DC
• netdom resetpwd /server:<FSMO DC hostname> /ud:<Domain>\<Admin Account> /pd:<Admin Passwd>
• restart long-disconnected DC
• Use dcpromo repeatedly to demote server (I got timeouts for netlogon taking too long to respond; WAN authentication latency problem?)
• restart the now demoted long-disconnected DC
• Click OK to "one or more services failed to start"; not finding a DC
• Use Terminal Services to remove demoted DC as a DNS NS from AD-integrated zones on the FSMO DC
• Use Terminal Services to connect to FSMO DC and replicate the entire domain
• run dcpromo to promote standalone server

Thought I'd post this to help out any other poor sod stuck in this sorry state.

Might just have to run up a couple of VMs to verify this still works...

TechNet now has guidance on this with the Reconnecting a Domain Controller After a Long-Term Disconnection article. Doesn't look like what I've got above.

Microsoft Action Pack, New Assessment Criteria and New Special Edition Toolkits

As a Microsoft Registered Partner, I'm able to utilise the fantastic Microsoft Action Pack Subscription. This enables me to run my business on the same technologies I recommend to my clients, as well as evaluate and prepare for new and upcoming technologies. Combined with my TechNet Plus subscription, I'm able to evaluate a wide range of Microsoft technologies cost effectively. Virtualisation also enables me to test networks larger than my physical network.

Recently Microsoft introduced an assessment requirement to gain access to the Action Pack. This assessment requires partners to take an e-Learning course and then pass its associated assessment with a minimum score of 70%. This assessment must be passed every two years to receive uninterrupted Action Pack Subscription updates (see Eric Ligman's blog post on Action Pack Downgrade Rights for the best reason to not have your subscription lapse). The recommended courses are:

• Selling Microsoft Windows® Small Business Server 2003
  
• Implementing, Managing and Deploying Applications in Windows Server 2003
  
• Designing, Deploying and Managing a Network Solution for the Small and Medium-size Business
  
• Selling Microsoft Solutions to Small Business
  
• Implementing Microsoft Solution Accelerators for Small Business
  
• Introduction to Selling SQL Server 2005
  
• SQL Server 2005: Essentials for Sales Professionals
  
• Volume Licensing for Small and Medium Businesses
  
• Small Business Sales and Marketing Assessment (Small Business Specialist Requirement)

All but the Small Business Sales and Marketing Assessment (SBSMA) are Online Tutorials. The SBSMA is classed as an Assessment and as mentioned above is a pre-requisite to become a Small Business Specialist.

Microsoft also introduced two Special Edition Kits to the Action Pack. These are the Web Solutions Toolkit and the Small Business Specialist Toolkit. Both of these toolkits require additional assessment to be performed prior to issuance.

The Web Solutions Toolkit requires one of the following e-Learning courses to be passed with a minimum score of 70%

• Microsoft .NET Assessment
  
• Microsoft Expression Assessment
  
• Microsoft Office Live Developer Assessment

I completed the Microsoft Expression Assessment quite easily, as I had recently used Expression Web to build my Web site and have been playing with both the Expression Design and Blend CTPs over the last few months.

The Small Business Specialist Toolkit requires that you have completed the requirements to become a Small Business Specialist. The full details can be found here. The short form of this is:

• Become a Microsoft Partner
  
• Pass the Small Business Sales and Marketing Assessment
  
• Pass one of the following exams:
  
  • Microsoft Exam 70-282 - Designing, Deploying, and Managing a Network Solution for Small and Medium-Sized Business
    
  • Microsoft Exam 70-631 - Configuring Windows SharePoint Services 3.0
    
  • Microsoft Exam 74-134 - Pre-installing Microsoft Products Using the OEM Pre-installation Kit

Both of these Special Edition Kits will be refreshed biannually.
Another good reason to perform e-Learning and become certified!