Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1392
  • Last Modified:

Can't delete a failed/removed DC from AD Sites and Services

We had a failing DC (SERVERNAME) removed yesterday and the other AD-integrated DC was enabled as the PDC, schema master etc. by successfully seizing the FSMO roles via ntdsutil and by establishing a GC on the new primary DC.

However, we did not have the chance to dcpromo the other DC in order to remove it from the AD.  

Now, when I attempt to delete SERVERNAME in AD Sites and Services, I get the following error:

"The DSA object cannot be deleted."

And, because of the above situation, the File Replication Service keeps spitting out these warnings in the log:
------------------------------------------------------------------------------------
The attempt to establish a replication link with parameters
 
 Partition: CN=Schema,CN=Configuration,DC=corp,DC=MyDomain,DC=com
 Source DSA DN: CN=NTDS Settings,CN=SERVERNAME,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=corp,DC= MyDomain,DC=com
 Source DSA Address: 8e351b4a-d81c-459d-a77d-7c02fd3c0330._msdcs.corp. MyDomain.com
 Inter-site Transport (if any):
 
 failed with the following status:
 
 The DSA operation is unable to proceed because of a DNS lookup failure.
 The record data is the status code.  This operation will be retried.
------------------------------------------------------------------------------------

I am assuming this error is happening because the repl service still thinks SERVERNAME is in the AD, and it is attempting to replicate the NTDS Settings with the new DC.

So, how can I delete SERVERNAME from the AD Sites and Services, and will it then stop these file repl errors?
0
Billusa99
Asked:
Billusa99
  • 2
1 Solution
 
oBdACommented:
Have a look at those:

HOW TO: Remove Data in Active Directory After an Unsuccessful Domain Controller Demotion
http://support.microsoft.com/?kbid=216498

Error Message: DSA Object Cannot Be Deleted
http://support.microsoft.com/?kbid=318698

Domain Controller Server Object Not Removed After Demotion
http://support.microsoft.com/?kbid=216364

Cannot Delete a Computer Account for the Domain Controller in Windows 2000
http://support.microsoft.com/?kbid=328775

Deletion of Critical Objects in Active Directory in Windows 2000 and Windows Server 2003
http://support.microsoft.com/?kbid=298450
0
 
Billusa99Author Commented:
Thanks oBdA!

This Link addressed the deletion of SERVERNAME and its NTDS object just fine:
HOW TO: Remove Data in Active Directory After an Unsuccessful Domain Controller Demotion
http://support.microsoft.com/?kbid=216498

All worked according to the detailed intructions. However, for some reason SERVERNAME was still in the AD Sites and Services when I re-opened it.  I right-click-deleted SERVERNAME there and then it was gone for good.

Now, when I click on NTDS settings for the remaining First-name AD DC, there is a replication object in the right frame, with the double-servers icon, still showing that SERVERNAME is a source of config replication info.  Since I have no other DC and no repl yet, can I delete that object too?
0
 
Billusa99Author Commented:
Please disregard my previous comment. I made an intuitive leap and successfully deleted the repl. object.

All is well!  Thanks for the help!!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now