U-Tools: Unique Tools for Windows System Administrators
U-Move Help

Demoting the Old Domain Controller

This optional cleanup step will demote the old domain controller and retire it from the network.

How to demote the old DC
  1. Optional: Swap the IP address. Do this before you demote the old DC.
  2. Verify that U-Move has successfully moved all DNS settings and zones to the new DC. Inspect the DNS Test Report and make sure there are no red error messages.
  3. Verify that U-Move has successfully moved all FSMO roles to the new DC. Inspect the Replication Test Report and make sure there are no red error messages.
  4. Run Dcpromo or Server Manager to demote the old DC.
    See Decommissioning Windows Server domain controller.
  5. Reboot the demoted DC (if not done automatically.)
  6. Run U-Move on the new DC and click on the tab Upgrade. Connect to the new DC. Verify there are no red error messages in the Verify Computer Report, the DNS Test Report, the Post-Upgrade Test Report, or the Post-Upgrade Report.
  7. Verify that the desktop client computers can authenticate and log on to the domain and access file shares in the domain.
  8. Do not attempt to rename new DC until after you successfully demote the old DC.
Troubleshooting DC Demotion

If Dcpromo or Server Manager fail to demote the DC, you might need to do a forced demotion. See the following Microsoft articles:


See also Troubleshooting AD Errors.

Troubleshooting: Unable to log on

If you cannot log to the demoted computer using a domain account, try logging on using the local Administrator account. By default it has the same password as the original domain administrator account (unless you changed it during the demotion process).

The initial logon prompt will show the account name MyDomain\Administrator, where MyDomain is the name of the domain. This is incorrect. To log in to the local administrator account you must click on Switch User and manually type the name .\Administrator.

(Note: The name 'Administrator' might vary by language.)