Hi Tom

I have done this probably a dozen times due to poor hardware based DC's
that die and are unrecoverable with no problems at all.  We have also used
this to remove a domain from the forest for the same reason, and found that
you must remove all DC's, the DNS naming context, and then the domain
itself.  I would guess you do not need to actually delete your domain.

We have found that waiting a full replicaiton cycle (18 hours) before
putting up a new DC with the same name simplifies things.  We have also
found that manually deleting the host and NS records (if it is a DNS
server) from the DNS for that server, plus removing the GUID record from
the forest root msdcs folder simplifies things as well.

Regards;

James R. Day
National Parks Service - AD Core Team
(202) 354-1464
Fax (202) 371-1549
[EMAIL PROTECTED]


                                                                                       
                                                      
                      "Kern, Tom"                                                      
                                                      
                      <[EMAIL PROTECTED]>            To:       <[EMAIL PROTECTED]>     
                                           
                      Sent by:                       cc:       (bcc: James 
Day/Contractor/NPS)                                               
                      [EMAIL PROTECTED]        Subject:  RE: [ActiveDir] From not so 
bad to worse - Tips from the field?               
                      tivedir.org                                                      
                                                      
                                                                                       
                                                      
                                                                                       
                                                      
                      04/07/2004 01:50 PM AST                                          
                                                      
                      Please respond to                                                
                                                      
                      ActiveDir                                                        
                                                      
                                                                                       
                                                      




I've followed that and done it at least 4 or 5(for test recovery dc's)
times without any issue. It takes about 30mins in my 7 domain forest for
changes to fully replicate and then all is well.
      -----Original Message-----
      From: Lou Vega [mailto:[EMAIL PROTECTED]
      Sent: Wednesday, April 07, 2004 1:38 PM
      To: [EMAIL PROTECTED]
      Subject: [ActiveDir] From not so bad to worse - Tips from the field?

      OK â things went from not so bad to worseâtoday my test DC is
      unresponsive (it refuses to load the OS after a reboot last night). I
      launched the recovery console from the W2K CD and running CHKDSK
      reveals âthere are one or more unrecoverable errors on this volumeâ.
      Great J

      So now my goal is to remove this âdeadâ DC from my Active Directory.
      Iâve read over the KB Article here (
      http://support.microsoft.com/?id=216498 ) describing the steps to do
      the metadata cleanup. What Iâm looking for now is any additional tips
      or advice from the field on doing this.



            -----Original Message-----
            From: [EMAIL PROTECTED]
            [mailto:[EMAIL PROTECTED] On Behalf Of Lou
            Vega
            Sent: Wednesday, April 07, 2004 11:18 AM
            To: [EMAIL PROTECTED]
            Subject: [ActiveDir] Anyone experienced this? Volume
            "dissapears" after DCPromo?

            Iâm curious if anyone else out there has experienced this.

            I have a Windows 2000 Advanced Server â updated with SP4 and
            all the latest patches, etc.
            I ran DCPromo â to add it to an existing domain. Prior to the
            DCPromo â I had two volumes C and D each at 189 GB (itâs a
            server Iâm building for testing)
            Both volumes were formatted NTFS though there werenât but a few
            BKF files of this server on the D volume.

            Immediately after my DCPromo â I rebooted and got the following
            error message:

            lsass.exe - System Error : Security Accounts Manager
            initialization failed because of the following error: Directory
            Service cannot start. Error Status: 0xc00002e1. Please click OK
            to shutdown this system and reboot into Directory Services
            Restore Mode, check the event log for more detailed
            information.

            Fortunately for me a Google search turned up the following KB
            article (
            http://support.microsoft.com/default.aspx?scid=kb;EN-US;258007
            ) and I was able to go into DS Restore mode, and using NDSUTIL
            SET PATH change the path of my NTDS Log filesâ.(so my
            âemergencyâ of a failed DCPromo is solved! Whooo hoo!!!) hereâs
            the kicker â the reason for the error and the failure was
            because now the D volume is âunrecognizedâ â Windows reports it
            as âUnformatted â do you want to format now?â and when you try
            it fails.

            Is there a limit to the size of a volume that AD recognizes?
            The original cause of the error is because when I was running
            the DCPromo and it asked where I wanted to put the DB and Log
            files, I picked C:\winnt\ntds for the DB and D:\winnt\ntds for
            the Log files â then for some reason D became unrecognized
            after the Promo was finished. Anyone else seen this?

            r/
            Lou

ŠËbú!¶Úÿ0iËb½çb®Šàþf¢–X¬¶f.+-!¶Úÿ0iËb½çb®ŠàþX¬µöª†ÙŠËZ­Èb½èm¶ŸÿÃ
&j)Z­Èb½ç(›öœ¶+Þv*øÒf¢•§-Š÷+ƒ

Reply via email to