We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now

x

win2000 AD out of synch for more than 90 days

vayoha
vayoha asked
on
Medium Priority
317 Views
Last Modified: 2010-04-13
Hi,  have one win2k AD in win2003 environment that is out of sync with other DC for more than 90 days for some unknown reason.  I tried to manually force it to synch but failed.  Anyway, I remember reading somewhere you can't force a DC to sync if it is out of sync for more than 90 days.  You have to practically rebuild that DC.  Does anyone know if this claim is correct?  if not, then what is the best way for me to fix this problem?  thanks for your helps
Comment
Watch Question

Did you convert the domain to Windows 2003 mode?  If you did, then you will need to upgrade the Windows 2000 DC to a Windows 2003 server.

If this is not the case, check your bridgehead connections.  This is done from Active Directory Sites and Services MMC.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
CERTIFIED EXPERT
Top Expert 2006
Commented:
this is correct - if the server has been offline that long that you need to demote the DC using DCPROMO and then promote the DC backin

the data simple gets to old on the offline machine to update and fix
Commented:
We had a simlar problem but it wasnt until the netlogon and sysvol shares had disappeared from the server we noticed.
if you run through the following tech article it should solve your problem
http://support.microsoft.com/kb/316790
once this had been done it resynced our active directory as well.

Hope this helps
If the DC was to long out of sync (I think it was 60 days = tombestone lifetime) you need to remove it from your domain and reinstall/dcpromo it back again.

If a normal DC-de-promo does not work, you need to do a dcpromo /forceremoval and cleanup the AD with metadatacleanup, etc...

http://support.microsoft.com/kb/216498
http://support.microsoft.com/kb/332199/
http://www.petri.co.il/delete_failed_dcs_from_ad.htm

Author

Commented:
thank you all for the quick response.  I will go with the demo, clean up metadata at all of other domains and then promo it again.  Lets see how it goes.  
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.