Remove Web Application Proxy Server From Cluster Jun 2026

| | Expected Result | Command/Method | |----------|---------------------|--------------------| | Published app access | Successful login and page load | Browser access from external network | | Health check of remaining nodes | All return 200 OK | curl -I https://remaining-node.fqdn/health | | Load distribution | Traffic only to remaining nodes | Check LB logs | | AD FS endpoint response | Returns proper metadata | https://adfs.fqdn/FederationMetadata/2007-06/FederationMetadata.xml | | Event logs (no errors) | No 130, 131, or 249 errors in AD FS Admin log | Get-WinEvent -LogName "AD FS/Admin" | | SSL/TLS handshake | Valid cert chain presented | openssl s_client -connect remaining-node:443 |

Even after role removal, some artifacts persist. Delete manually: remove web application proxy server from cluster

This method ensures the trust relationship between the WAP server and the internal AD FS farm is cleanly revoked before the server is taken offline. remove web application proxy server from cluster

To ensure no traffic is incorrectly routed to the decommissioned server: remove web application proxy server from cluster