I guess if the server were described as "rouge" is would be problematic since it would not be visible :)
Great faux pas! neil -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Blair, James Sent: 25 May 2005 23:44 To: [email protected] Subject: RE: [ActiveDir] DC's not replicating Had the same issue in a remote site and agree with Freddy. Once you have done this you need to do a metadata cleanup using ntdsutil and remove all instances of the "rouge" server from AD and the schema, Q216498 applies. Should the server have been an FSMO role holder you will need to seize/transfer that role/s, in this instance Q255504 applies. I would then advise you rename the server, put it back on the domain and re DCPROMO it. Do you have a DNS server in that site? James -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, 26 May 2005 8:25 AM To: [email protected] Subject: RE: [ActiveDir] DC's not replicating /Forceremoval? Thank you and have a splendid day! Kind Regards, Freddy Hartono Windows Administrator (ADSM/NT Security) Spherion Technology Group, Singapore For Agilent Technologies E-mail: [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ Sent: Thursday, May 26, 2005 12:28 AM To: [email protected] Subject: [ActiveDir] DC's not replicating Getting a continous flow of these errors on one of our remote DCs. Can't even log into it as my own domain admin account (says invalid user/pass) so I have to log in as "administrator". Won't let me demote it even, says directory service invalid. Any ideas? Active Directory did not perform an authenticated remote procedure call (RPC) to another domain controller because the desired service principal name (SPN) for the destination domain controller is not registered on the Key Distribution Center (KDC) domain controller that resolves the SPN. Destination domain controller: b2293e9b-4f9c-4bd7-9b63-ab8c3ab002b8._msdcs.ourdomain.com SPN: E3514235-4B06-11D1-AB04-00C04FC2DCD2/b2293e9b-4f9c-4bd7-9b63-ab8c3ab002b 8/[EMAIL PROTECTED] User Action Verify that the names of the destination domain controller and domain are correct. Also, verify that the SPN is registered on the KDC domain controller. If the destination domain controller has been recently promoted, it will be necessary for the local domain controller's computer account data to replicate to the KDC before this computer can be authenticated. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ ============================================================================== This message is for the sole use of the intended recipient. If you received this message in error please delete it and notify us. If this message was misdirected, Credit Suisse, its subsidiaries and affiliates (CS) do not waive any confidentiality or privilege. CS retains and monitors electronic communications sent through its network. Instructions transmitted over this system are not binding on CS until they are confirmed by us. Message transmission is not guaranteed to be secure. ============================================================================== List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
