
ph9xs (ph9xs) asked a question.
OKTA is integrated to Active Directory with existing Okta AD Agent. We will decommission few Domain Controllers in the domain and would like to be sure it will not affect OKTA integration. How can we check with Domain Controller Okta use (if any)?

Hello @ph9xs (ph9xs) Thank you for reacting out to our Community!
As long as there is no AD agent on that DC, there should be no issue removing it. You can also check if there is any AD agent on the DC and if there were any authentications against it, please see article below:
https://support.okta.com/help/s/article/Finding-the-Domain-Controller-with-which-an-Okta-Active-Directory-Agent-Most-Recently-Communicated?language=en_US
I would also advice to check from the doc below, the AD Prerequisites, the section with "Configure delegation for the Okta Service account" to be sure there were no changes done in that regard, that might afect you.
https://help.okta.com/en-us/content/topics/directory/ad-agent-prerequisites.htm
Community members help others by clicking Like or Select as Best on responses. Try it today.
Ask Away: OIG Product Experts Answer Your Questions Thru Thur., Dec 14
Earn Today: New Okta Community Badges Have Arrived