URGENT HELP!!!  AD Failure!!!

Posted on 2004-09-08
Last Modified: 2012-06-27
Man!!!  I've been fighting with this problem for a WHOLE DAY!!!  I am getting Error status 0xc00002e1 on one of my DC (also my Exchange server).  After reading and following the instructions in this article article:;en-us;258062 for the entire day, I've finally decided to give up.

I cannot even perform the "dcpromo /forceremoval" per their instruction, because...  you guess it... you cannot perform dcpromo in "safe mode" or "directory restore mode"...  Of course, you cannot get into the normal mode until you either fix the problem or remove AD!!!!

Anyway, my question is this...  I DO NOT have a backup of my A/D, but I DO have, however, a working Domain Controller.  Is there a way for me to restore my configuration on my broken DC FROM the good one?


- Info
Question by:infotrader
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2

Accepted Solution

dgroscost earned 250 total points
ID: 12012711
Have you tried doing an authoritative restore from the working domain controller?

LVL 12

Assisted Solution

Housenet earned 250 total points
ID: 12012836
-No backup.....Ouch!
-Following the article's steps, what is your estimation of the problem source? missing files, corruption?
LVL 11

Author Comment

ID: 12012867
I know...  I should "rephrase"...  I do not have the backup of AD, but have maintain backups of all my data files... Which covers the worst case scenario... which is what I might have to face.. reinstall the AD.

Good thing is, I only have 3 active users... Bad thing is, I've got TONS of services (http, sharepoint, sql, exchange, etc.)... SO I am trying to avoid reinstall if possible.

No I have not tried doing an authoritative restore from the working DC... Can someone point me to the right direction as to how to do that?  Thanks a great bunch, you guys!!!

- Info
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

LVL 12

Expert Comment

ID: 12017971
-I dont understand that comment. "authoritative restore from the working domain controller" It does make any sence to me. You already said you did not backup the system state.
-What about a repair installation of windows?
-You might as well go for something like this because it does not look good at all.

*In the future use at the very least Ntbackup to backup windows, program files and the system state at least once after it is installed.

Expert Comment

ID: 12018326


On the working DC, seize the roles of the bad DC.
Remove the old DC.

Then, rebuild and promote a new DC.
LVL 11

Author Comment

ID: 12018395
Thanks!!  I'll keep that in mind.  I thought there was a way to "reload" the Active Directory portion of system state from the good DC.  Unfortunately, after playing with "exporting" the NTDS quite a bit, I've finally gave up and posted the question here.

Believe it or not, I am actually benefitting a lot from our exchange of posts here.  I tried to think "outside of box" after the dgroscost's comment and re-searched google using a different terms (restore "active directory" from another DC), and found a pretty good documentation regarding how to do authoritative, recovery through reinstall, and non-authoritative restore.

One of my biggest problems originally was that I could not remove the Exchange box out of AD cleanly, since it cannot connect to the AD and was getting a lot of "access denied"'s.  I finally figure out how to use netdom and navigate around, including switching user credentials (Apparently, AD doesn't like it when my local Administrator and Domain Administrator has different passwords, causing invalid credentials, I am guessing....).  

To make the story short, I've finally decided to backup my Exchange database, reinstall windows (I am feeling better now, because it is compeletely removed from AD), and reload everything back.

Here's the article (very informative, actually) if you guys are interested:

Thanks anyway.  I am going to give split the points to dgroscost for helping me thinking outside of the box, and Housenet for effort.

- Info

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question