Prairie Schooner: Old DC decommission (TPS-SERVER) #85

Closed
opened 2026-07-18 14:25:54 -07:00 by azcomputerguru · 1 comment

Discovered: 2026-07-07

After QB migration: transfer all 5 FSMO roles to TPS-SVR, demote TPS-SERVER, retire Enterprise Root CA (or migrate to TPS-SVR), clean DNS/AD of old DC object. TPS-SERVER is sole DC + CA + DNS + file server today. Blocked until QB migration complete.

**Discovered:** 2026-07-07 After QB migration: transfer all 5 FSMO roles to TPS-SVR, demote TPS-SERVER, retire Enterprise Root CA (or migrate to TPS-SVR), clean DNS/AD of old DC object. TPS-SERVER is sole DC + CA + DNS + file server today. Blocked until QB migration complete.
Author
Owner

2026-07-19 -- unblocked, ready to proceed

Prerequisites completed:

  • All 5 FSMO roles on TPS-SVR
  • QuickBooks migrated and verified on TPS-SVR
  • All workstations authenticating against TPS-SVR
  • KDC and Netlogon already stopped on TPS-SERVER
  • TPS-SERVER shut down 2026-07-19

Remaining decom steps:

  1. Confirm no issues Monday (users log in, QB works, GPO Q: drive applies)
  2. Power on TPS-SERVER temporarily for formal demotion
  3. Run Uninstall-ADDSDomainController (demote)
  4. Migrate or retire Enterprise Root CA
  5. Clean stale DNS records (duplicate _ldap._tcp SRV for TPS-SERVER, any remaining A records)
  6. Remove TPS-SERVER computer object from AD
  7. Update UDM Pro DHCP to remove .125 as secondary DNS
  8. Retire hardware (ThinkServer TS140, WS2016 Essentials)
**2026-07-19 -- unblocked, ready to proceed** Prerequisites completed: - All 5 FSMO roles on TPS-SVR - QuickBooks migrated and verified on TPS-SVR - All workstations authenticating against TPS-SVR - KDC and Netlogon already stopped on TPS-SERVER - TPS-SERVER shut down 2026-07-19 **Remaining decom steps:** 1. Confirm no issues Monday (users log in, QB works, GPO Q: drive applies) 2. Power on TPS-SERVER temporarily for formal demotion 3. Run Uninstall-ADDSDomainController (demote) 4. Migrate or retire Enterprise Root CA 5. Clean stale DNS records (duplicate _ldap._tcp SRV for TPS-SERVER, any remaining A records) 6. Remove TPS-SERVER computer object from AD 7. Update UDM Pro DHCP to remove .125 as secondary DNS 8. Retire hardware (ThinkServer TS140, WS2016 Essentials)
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: azcomputerguru/claudetools#85