To ensure your remaining environment is working perfectly, let me know: What are you currently running? Are you using Windows NLB or a hardware load balancer ?
Removing a Web Application Proxy server from a cluster is not a “click and forget” operation. It requires reverence for the identity pipeline that runs your business-critical SSO. By following this guide – draining traffic, revoking trust, removing the role, and validating the cluster – you ensure zero downtime and zero security regressions.
This typically indicates that the host remains defined in your hardware load balancer health check paths or Windows NLB settings. Double-check that all network load balancers have completely deleted the IP of the old node.
Removing a WAP server from an ADFS farm requires cleanup on both the WAP server itself and the internal ADFS server.
Before surgery, check the patient’s vitals. Run these commands in the farm (preferably the primary):
Ensure the server object has been removed from the Active Directory connector group to avoid "phantom" server errors. Summary of Best Practices
Removing a server from a cluster involves both decommissioning the role on the specific server and ensuring the remaining cluster "forgets" the removed node. If a server is simply shut down or the role is uninstalled without updating the cluster configuration, it may still appear as a "ghost" entry in management consoles. 1. Remove the Server from the Cluster List
The -Restart switch will automatically reboot the server to complete the clean-up process. Post-Removal Cleanup Tasks
✅ . If total CPU on remaining nodes exceeds 70% sustained, add a replacement node before removing a second one.
Remove the target WAP server's IP address from the load balancer pool. Back Up Current Settings
Place the target WAP server into a or Drain mode.
Follow the wizard and uncheck the role (which includes WAP). Confirm and restart the server to complete the removal. PowerShell: Reset WAP Configuration - Master & CmdR
Click in the top right corner and select Remove Roles and Features . Click Next until you reach the Server Roles page.
If you are retiring the server permanently, you can also remove its proxy trust certificate from the local store. Important Considerations
