Hi Tom
I have done this probably a dozen times due to poor hardware based DC's
that die and are unrecoverable with no problems at all. We have also used
this to remove a domain from the forest for the same reason, and found that
you must remove all DC's, the DNS naming context, and then the domain
itself. I would guess you do not need to actually delete your domain.
We have found that waiting a full replicaiton cycle (18 hours) before
putting up a new DC with the same name simplifies things. We have also
found that manually deleting the host and NS records (if it is a DNS
server) from the DNS for that server, plus removing the GUID record from
the forest root msdcs folder simplifies things as well.
Regards;
James R. Day
National Parks Service - AD Core Team
(202) 354-1464
Fax (202) 371-1549
[EMAIL PROTECTED]
"Kern, Tom"
<[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>
Sent by: cc: (bcc: James
Day/Contractor/NPS)
[EMAIL PROTECTED] Subject: RE: [ActiveDir] From not so
bad to worse - Tips from the field?
tivedir.org
04/07/2004 01:50 PM AST
Please respond to
ActiveDir
I've followed that and done it at least 4 or 5(for test recovery dc's)
times without any issue. It takes about 30mins in my 7 domain forest for
changes to fully replicate and then all is well.
-----Original Message-----
From: Lou Vega [mailto:[EMAIL PROTECTED]
Sent: Wednesday, April 07, 2004 1:38 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] From not so bad to worse - Tips from the field?
OK â things went from not so bad to worseâtoday my test DC is
unresponsive (it refuses to load the OS after a reboot last night). I
launched the recovery console from the W2K CD and running CHKDSK
reveals âthere are one or more unrecoverable errors on this volumeâ.
Great J
So now my goal is to remove this âdeadâ DC from my Active Directory.
Iâve read over the KB Article here (
http://support.microsoft.com/?id=216498 ) describing the steps to do
the metadata cleanup. What Iâm looking for now is any additional tips
or advice from the field on doing this.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Lou
Vega
Sent: Wednesday, April 07, 2004 11:18 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Anyone experienced this? Volume
"dissapears" after DCPromo?
Iâm curious if anyone else out there has experienced this.
I have a Windows 2000 Advanced Server â updated with SP4 and
all the latest patches, etc.
I ran DCPromo â to add it to an existing domain. Prior to the
DCPromo â I had two volumes C and D each at 189 GB (itâs a
server Iâm building for testing)
Both volumes were formatted NTFS though there werenât but a few
BKF files of this server on the D volume.
Immediately after my DCPromo â I rebooted and got the following
error message:
lsass.exe - System Error : Security Accounts Manager
initialization failed because of the following error: Directory
Service cannot start. Error Status: 0xc00002e1. Please click OK
to shutdown this system and reboot into Directory Services
Restore Mode, check the event log for more detailed
information.
Fortunately for me a Google search turned up the following KB
article (
http://support.microsoft.com/default.aspx?scid=kb;EN-US;258007
) and I was able to go into DS Restore mode, and using NDSUTIL
SET PATH change the path of my NTDS Log filesâ.(so my
âemergencyâ of a failed DCPromo is solved! Whooo hoo!!!) hereâs
the kicker â the reason for the error and the failure was
because now the D volume is âunrecognizedâ â Windows reports it
as âUnformatted â do you want to format now?â and when you try
it fails.
Is there a limit to the size of a volume that AD recognizes?
The original cause of the error is because when I was running
the DCPromo and it asked where I wanted to put the DB and Log
files, I picked C:\winnt\ntds for the DB and D:\winnt\ntds for
the Log files â then for some reason D became unrecognized
after the Promo was finished. Anyone else seen this?
r/
Lou
Ëbú!¶Úÿ0iËb½çb®àþf¢X¬¶f.+-!¶Úÿ0iËb½çb®àþX¬µöªÙËZÈb½èm¶ÿÃ
&j)ZÈb½ç(ö¶+Þv*øÒf¢§-÷+