0

I have a single forest/domain with 2 DCs, SERVER2 and SERVER3. SERVER2 holds the FSMO roles. Both are healthy.

I now wish to remove SERVER2 for a clean reinstall. Based on my research for the project, I propose to take these steps:

  1. Transfer the FSMO roles to SERVER3
  2. Demote SERVER2 to a member server
  3. Remove SERVER2 from the domain
  4. Perform the reinstall of SERVER2
  5. Join SERVER2 to the domain
  6. Promote SERVER2 to a DC
  7. Transfer the FSMO roles to SERVER2

Is this all that's necessary for the task? Do I need to do any sort of cleanup or maintenance on SERVER3 after removing SERVER2 at step #3?

InteXX
  • 795

1 Answers1

1

The DC that holds the PDCe FSMO role is the authoritative time server for the domain. This is where the other DC's sync their time to. When you transfer the FSMO roles to SERVER3 you'll need to reconfigure the Windows Time service on SERVER3. Then when you move the FSMO roles back to the newly installed SERVER2 you'll need to reconfigure the Windows Time service on BOTH DC's. Here's how I do it:

PDCe FSMO Role Holder

net stop w32time
w32tm /unregister
w32tm /register
net start w32time
w32tm.exe /config /manualpeerlist:time.windows.com /syncfromflags:manual /reliable:YES /update
net stop w32time
net start w32time


Domain Members (Including other Domain Controllers)


net stop w32time
w32tm /unregister
w32tm /register
net start w32time
w32tm /config /syncfromflags:DOMHIER /update
net stop w32time
net start w32time
joeqwerty
  • 111,849