In this chapter, we have elaborated on the steps to recover a completely failed DC. We have discussed the removal of the DC objects and the DNS records of the failed DC, and elaborated on why this is necessary.

Even though the removal of the old records may not appear to be very important, a part of this chapter explained in detail why the removal of old records is such an important step, and how it is done correctly. The recovery of a completely failed or broken DC is, as mentioned, a matter of installing a new one. The situation becomes trickier when, for political or other reasons such as applications that use specific servers, you need to use the same name as the failed DC.

By following the steps outlined in this chapter, you will end up with an AD that is clean, as though the old DC had never existed.