AD Inconsistency.

  • Thread starter Thread starter SteveK1212
  • Start date Start date
S

SteveK1212

Hi,

We've got three DC's in our domain all GC's.
On one of the servers I've recently checked the system
event log and noticed that there is an event id 11 from
the KDC specifying that "there are multiple accounts with
name host/myserver.mydomain.com of type 10".

(server of that name was removed from the AD and the name
reused for another server a shortish time later).

Two of the servers including the one holding all the
FSMO's have no issues in this regard so I assume that
replication took place between these but didn't with the
problem server.

This leaves me with the issue of how best to consolidate
the AD and get the correct info onto the problem server.
I believe that I can demote and then promote the server in
order to pull across the correct info, is this the case ?
Is there another way that aviods having to demote such as
hacking the USN and setting to 0 to force a acomplete
update.
Ideally Idon't want to use ADSIEdit and given that the
correct info exists on the other servers Iwould prefer to
let AD resolve itself albeit forced.

Any ideas.

Thanks in advance.
 
when the old server with the same name was removed (i'm assuming this is
what was done from the info you've provided) how was this done ?did you
perform a metadata cleanup ? if not you might want to connect to the
problem server using the NTDS util and remove all references to the old
server name, ofcourse assuming this was not done in the first place.

Regards

Sameer
 
-----Original Message-----
when the old server with the same name was removed (i'm assuming this is
what was done from the info you've provided) how was this done ?did you
perform a metadata cleanup ? if not you might want to connect to the
problem server using the NTDS util and remove all references to the old
server name, ofcourse assuming this was not done in the first place.

Regards

Sameer

.
Hi Sameer,
Click to expand...

No I didn't clear out the metadata after removing the
server.
The server name is back in use with a new server, surely
if I remove referances to the old server name I will also
be removing referances to the new server as thay have the
same name or is there an easy way to differentiate the two.

Thanks
 
Back
Top