Domain Naming Master
Also, if your domain is top-level in the AD forest, configure DC1 to sync with external time sources.
To safely remove a node from a Windows 2003 Fail-Over Cluster, follow these steps:
Active Directory (AD) integrated DNS zones are not replicated by the DNS server, but replicates through the Active Directory replication mechanism, and uses the same settings for AD replication.
You can trigger replication through Active Directory Sites and Services, or with repadmin.exe on command prompt:
repadmin.exe /replicate target_dc source_dc DC=DomainDnsZones,DC=domain,DC=com
Replace parameters accordingly:
During start up or log on, once in a while, you'll see a message just saying Please wait. To turn this message into a more useful message, you can enable verbose messages through a policy setting (local or GP):
Either through gpedit.msc, or, if you're in a domain, through a GPO, navigate to Computer Configuration → Administrative Templates → System. Look for the setting Display highly detailed status messages and set it to Enabled. Reboot to apply the change.
When demoting a 2003 domain controller using dcpromo, you may run into the following error:
The error message is quite misleading as the real cause has got nothing to do with NETLOGON, but is in fact a DNS issue. You will most likely have the server's primary DNS pointing to itself using loopback address (127.0.0.1) or its own IP address.
You can correct the issue by having the DNS point to remaining domain controllers, and remove any DNS pointing to itself (i.e. loopback address or any other IP owned by the server being demoted).
There are two ways to see which Certificate Authority servers exist in your AD domain.
The AD group Cert Publishers contain the servers that are permitted to publish certificates to AD. As a consequence, this gruop will contain all servers that are CAs.
You can use the certutil command to view (and select from) a list of CAs in the current AD domain:
certutil -config - -ping
Note: type the command as-is, including all spaces and hyphens.
A window will appear, listing the CA name and the server it runs on.