Active Directory Problem

  • Thread starter Thread starter Walter
  • Start date Start date
W

Walter

This is the following event viewer message. Event id:1559.
The prese child domain does not have any dc's in it.
However, I cannot remove it using metadata cleanup in
ntdsutil because it says there are still domain
controllers associated with this domain. I cant find any
anywhere in my domain.



A request has been made to promote this DSA to a Global
Catalog (GC). A precondition to becoming a GC is that
this server host a read-only copy of all partitions in
the enterprise. This server should hold a copy of
partition DC=prese,DC=hcsb,DC=k12,DC=fl,DC=us but it does
not. This system will not be promoted to a GC until this
condition is met.

This may be because the KCC has not run, or that it is
unable to add a replica of the partition because all of
its sources are down. Please check the event log for KCC
errors.

The KCC will retry adding the replica.
 
Here is an example...

DCRoot - a domain controller that is online in the domain that I am keeping.
DCTREE2 - the domain controller that is part of the domain I want to remove.
***
rootdomain - the domain I am keeping (which DCRoot is a DC for)
domaintree2 - the domain I am going to remove (which DCTREE2 is a DC for)

*** Even if you don't know what this DC is called, try the following steps
(NTDSUTIL will list any DCs that still have metadata in the directory for
the domain you want to remove given a site). These steps can be time
consuming if you have a large number of sites, so if you do have a lot of
sites let me know and I will give you another way of finding the pesky DC
metadata (although using NTDSUTIL is much safer).

C:\>NTDSUTIL
NTDSUTIL: metadata cleanup

metadata cleanup: connections

server connections: connect to server DCRoot
Binding to DCRoot ...
Connected to DCRoot using credentials of locally logged on user

server connections: Quit

metadata cleanup: select operation target

select operation target: list domains
Found 2 domain(s)
0 - DC=rootdomain,DC=local
1 - DC=domaintree2,DC=local

select operation target: select domain 1
No current site
Domain - DC=domaintree2,DC=local
No current server
No current Naming Context

select operation target: list sites
Found 1 site(s)
0 -
CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=rootdomain,DC=local

select operation target: select site 0
Site -
CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=rootdomain,DC=local
Domain - DC=domaintree2,DC=local
No current server
No current Naming Context

select operation target: list servers for domain in site
Found 1 server(s)
0 -
CN=DCTREE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,D
C=rootdomain,DC=local
to select the next site. With the next site selected, run the list servers
for domain in site command again...repeating until you find the first DC
that needs metadata removed.

select operation target: select server 0
Site -
CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=rootdomain,DC=local
Domain - DC=domaintree2,DC=local
Server -
CN=DCTREE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,D
C=rootdomain,DC=local
DSA object - CN=NTDS
Settings,CN=DCTREE2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Config
uration,DC=rootdomain,DC=local
DNS host name - DCTREE2.domaintree2.local
Computer object - CN=DCTREE2,OU=Domain
Controllers,DC=domaintree2,DC=local
No current Naming Context

select operation target: quit

metadata cleanup: remove selected server
domain controllers remaining for the domain you want to remove.

Hope that helps!

------------------------------------------------------------------
Mike Aubert
MCSE, MCSD, MCDBA
(e-mail address removed)

Note the "news2" in my email address is temporary and may be changed in the
future, remove it to email me at my Permanente address.
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top