problem with retired DC

Posted on 2006-05-02
Last Modified: 2010-03-19
At client`s site we have problem with a retired DC running NT4. Apparently there is a ghost on the network!!! When we shut down this host, the network is slightly slowing down. There is no DNS or DC relation with this host anymore, no share, no listening services.   We even used a sniffer and no trafic has been catched destinated to the host during 60min.

If you ever got similar issue, as network administrator, when removing old server please let me know what was the cause?  Will higher points to its mak if good answer is received
Question by:Danny_Larouche
    LVL 5

    Expert Comment

    Have you checked WINS?  Is this retired host listed as a WINS server for other hosts, or is it in the WINS database marked as workgorup or domain server?
    LVL 15

    Expert Comment

    by:Naser Gabaj
    Greetings Danny_Larouche,

    >> When we shut down this host, the network is slightly slowing down
    Start with checking the event viewer of that host if there is anything suspicious, and let me know.

    Good Luck!

    LVL 2

    Expert Comment

    Sound to me like the existing DCs think the DC still exists.

    you can remove it using NTDSUTIL

    Do a search on google for NTDSUTIL metadata cleanup and you will find step by step instructions
    LVL 15

    Expert Comment

    by:Naser Gabaj
    Hi Danny_Larouche,

    It's long time since you asked the Q. Are you still working on this? Was the information provided helpful? Do you need more information?

    If any of the above answers gave you the solution, please accept his/her answer with the appropriate grade you see.

    Please let us know, we appreciate your reply.

    LVL 8

    Author Comment

    Yes i work on it, the DC was effectively listed as DC then we tried to remove it from the list using srvmgr script. Curiously, the DC still there!! For any new attempt to remove it i got a message "DC is already removed... and will disapear from the list in 15min..."

    I will see tomorow if it affect the network or not and will try to block trafic destinated to this host
    LVL 2

    Accepted Solution

    Do what I said. That is what microsoft built in to fix the problem you are having. Here is a link to Microsoft's step by step instructions.

    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    Join & Write a Comment

    Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
    Join Greg Farro and Ethan Banks from Packet Pushers ( and Greg Ross from Paessler ( for a discussion about smart network …
    Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now