After removal, perform exhaustive testing.
If you are retiring the server permanently, you can also remove its proxy trust certificate from the local store. Important Considerations
netstat -an | find ":443" | find /c "ESTABLISHED"
Watch the logs in real-time to confirm traffic has stopped.
✅ after removal. The AD FS proxy trust certificate (default 1-year) does not need immediate reissue, but after a cluster size change, run:
Unjoin the server from the domain and delete its computer account from AD and DNS. ⚠️ Important Considerations
Uncheck (or specifically the Web Application Proxy sub-role). Restart the server when prompted to complete the removal.
After removal, perform exhaustive testing.
If you are retiring the server permanently, you can also remove its proxy trust certificate from the local store. Important Considerations remove web application proxy server from cluster
netstat -an | find ":443" | find /c "ESTABLISHED" After removal, perform exhaustive testing
Watch the logs in real-time to confirm traffic has stopped. but after a cluster size change
✅ after removal. The AD FS proxy trust certificate (default 1-year) does not need immediate reissue, but after a cluster size change, run:
Unjoin the server from the domain and delete its computer account from AD and DNS. ⚠️ Important Considerations
Uncheck (or specifically the Web Application Proxy sub-role). Restart the server when prompted to complete the removal.