Solved

event id 1988 lingering object

Posted on 2008-06-16
1
722 Views
Last Modified: 2010-05-18
hi all

Having a problem with one of the sites DC, that site was out of network for quiet some tiem , now the network is up , but when we try to replicate the sites, its giving errors, says replication denied by the destination dc, because of the tombstone life cycle..accecced denied
we try to uninstall AD, it fails, we tried to move the lingerring object with repadmin ..command, again that also fails....pls help asap...as its an urgent issue
0
Comment
Question by:silvershare
1 Comment
 
LVL 70

Accepted Solution

by:
Chris Dent earned 500 total points
ID: 21792966

Hey,

Detach the DC from the network and run "dcpromo /forceremove". That gets you around the error you're likely to get above, normally DCPromo checks everything has been done prior to actually demoting something.

** Drop it back to a workgroup before you think about promoting it again ** You absolutely must make it have a new Computer Account, the old one just won't do.

After ForceRemove you should clean meta data for the DC from AD by following this article:

http://support.microsoft.com/kb/216498

Once you've done all that, and made sure you're no longer getting errors you can rejoin the system to the domain.

Again, make sure there are no errors on join, then finally you can re-run dcpromo to make it a domain controller once more.

HTH

Chris
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question