Delete any specific A-records or host file entries that point to the decommissioned server. SSL Certificates:
Send a change notification at least 48 hours in advance. Include: remove web application proxy server from cluster
Remove-AdfsWebApplicationProxyRelyingPartyTrust -TargetName "WAP-SRV-02.contoso.com" Delete any specific A-records or host file entries
On any AD FS server (or using AD FS management tools): remove web application proxy server from cluster
# On the node being removed systemctl stop keepalived systemctl disable keepalived
Step 6: investigate root cause. With the node isolated, Priya pulled its diagnostic bundle. Disk I/O spikes and a kernel panic trace emerged—an intermittent driver bug in the network offload card. She filed a ticket and attached the bundle for the hardware team.
Appendix B: Emergency Contact List for AD FS/WAP Support Appendix C: Script to Auto-Drain and Remove WAP Node (Python/PowerShell)