Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

DC Crashed after installing windows updates

Posted on 2008-10-07
9
Medium Priority
?
270 Views
Last Modified: 2010-04-21
DC Crashed after installing windows updates, I have a full backup of the C: but I don't have a system state. The Active directory appears to be corrupted.  In active directory domains and trusts there are no items to display, also the Exchange server cannot contact a domain controller. Any help that you may provide will be greatly appreciated. We are in a work environment and people are highly dependent on their e-mails
0
Comment
Question by:Michaelgoff79
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
  • +1
9 Comments
 
LVL 3

Expert Comment

by:tismetoo
ID: 22659388
Do you have another domain controller available, even if it is on a different site?
0
 
LVL 1

Author Comment

by:Michaelgoff79
ID: 22659443
I have one on site but it seems to have replicated the corruption. I have a full backup of the c: on the original DC however I am unsure as to whether it has a system state backup included in the backup . To Answer your question yes we do have another domain controller, but I would prefer to fix this one if possible.
0
 
LVL 19

Expert Comment

by:MrLonandB
ID: 22659859
From the command prompt, change your directory to the directory that you have your SupportTools on. (If you don't have them, you can get them from the 2003 Server disk). Once in the right directory in the command prompt, type: dcdiag.exe and hit enter. (If you are already familiar with dcdiag - I apologize as some are not).

See from the results of the diag if there are any problems that stand out.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 17

Expert Comment

by:Steve
ID: 22659890
The following link has info about restoring Active Directory from VSS (if enabled)

http://articles.techrepublic.com.com/5100-10878_11-5269509.html
0
 
LVL 3

Expert Comment

by:tismetoo
ID: 22659908
Michael

It may be easier to remove the DC from the AD, rebuild it, then dcpromo it again. oBdA suggested these links to remove the Dc from the AD. At least then you would be sure the AD was intact, rather than risk the corruption spreading to your good DC.
How to remove data in Active Directory after an unsuccessful domain controller demotion
http://support.microsoft.com/?kbid=216498
How can I delete a failed Domain Controller object from Active Directory?
http://www.petri.co.il/delete_failed_dcs_from_ad.htm

It could be something like permissons if it is replicating. either way I wouldn't want to risk it contaminating the rest of th directory.
0
 
LVL 1

Author Comment

by:Michaelgoff79
ID: 22659954
here are the results of DCDiag
Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\INVESTMENT-2003
      Starting test: Connectivity
         ......................... INVESTMENT-2003 passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\INVESTMENT-2003
      Starting test: Replications
         ......................... INVESTMENT-2003 passed test Replications
      Starting test: NCSecDesc
         ......................... INVESTMENT-2003 passed test NCSecDesc
      Starting test: NetLogons
         ......................... INVESTMENT-2003 passed test NetLogons
      Starting test: Advertising
         ......................... INVESTMENT-2003 passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... INVESTMENT-2003 passed test KnowsOfRoleHolder
s
      Starting test: RidManager
         ......................... INVESTMENT-2003 passed test RidManager
      Starting test: MachineAccount
         ......................... INVESTMENT-2003 passed test MachineAccount
      Starting test: Services
            NtFrs Service is stopped on [INVESTMENT-2003]
         ......................... INVESTMENT-2003 failed test Services
      Starting test: ObjectsReplicated
         ......................... INVESTMENT-2003 passed test ObjectsReplicated

      Starting test: frssysvol
         ......................... INVESTMENT-2003 passed test frssysvol
      Starting test: frsevent
         ......................... INVESTMENT-2003 passed test frsevent
      Starting test: kccevent
         ......................... INVESTMENT-2003 passed test kccevent
      Starting test: systemlog
         ......................... INVESTMENT-2003 passed test systemlog
      Starting test: VerifyReferences
         ......................... INVESTMENT-2003 passed test VerifyReferences

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation

      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : INVRELINC
      Starting test: CrossRefValidation
         ......................... INVRELINC passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... INVRELINC passed test CheckSDRefDom

   Running enterprise tests on : INVRELINC.com
      Starting test: Intersite
         ......................... INVRELINC.com passed test Intersite
      Starting test: FsmoCheck
         ......................... INVRELINC.com passed test FsmoCheck

C:\Documents and Settings\Administrator.INVRELINC>


























Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests
   
   Testing server: Default-First-Site-Name\INVESTMENT-2003
      Starting test: Connectivity
         ......................... INVESTMENT-2003 passed test Connectivity

Doing primary tests
   
   Testing server: Default-First-Site-Name\INVESTMENT-2003
      Starting test: Replications
         ......................... INVESTMENT-2003 passed test Replications
      Starting test: NCSecDesc
         ......................... INVESTMENT-2003 passed test NCSecDesc
      Starting test: NetLogons
         ......................... INVESTMENT-2003 passed test NetLogons
      Starting test: Advertising
         ......................... INVESTMENT-2003 passed test Advertising
      Starting test: KnowsOfRoleHolders
         ......................... INVESTMENT-2003 passed test KnowsOfRoleHolders
      Starting test: RidManager
         ......................... INVESTMENT-2003 passed test RidManager
      Starting test: MachineAccount
         ......................... INVESTMENT-2003 passed test MachineAccount
      Starting test: Services
            NtFrs Service is stopped on [INVESTMENT-2003]
         ......................... INVESTMENT-2003 failed test Services
      Starting test: ObjectsReplicated
         ......................... INVESTMENT-2003 passed test ObjectsReplicated
      Starting test: frssysvol
         ......................... INVESTMENT-2003 passed test frssysvol
      Starting test: frsevent
         ......................... INVESTMENT-2003 passed test frsevent
      Starting test: kccevent
         ......................... INVESTMENT-2003 passed test kccevent
      Starting test: systemlog
         ......................... INVESTMENT-2003 passed test systemlog
      Starting test: VerifyReferences
         ......................... INVESTMENT-2003 passed test VerifyReferences
   
   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
   
   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
   
   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
   
   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
   
   Running partition tests on : INVRELINC
      Starting test: CrossRefValidation
         ......................... INVRELINC passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... INVRELINC passed test CheckSDRefDom
   
   Running enterprise tests on : INVRELINC.com
      Starting test: Intersite
         ......................... INVRELINC.com passed test Intersite
      Starting test: FsmoCheck
         ......................... INVRELINC.com passed test FsmoCheck



0
 
LVL 19

Accepted Solution

by:
MrLonandB earned 2000 total points
ID: 22660534
Do you have a backup copy of: c:\windows\ntfrs...? If so, suggest replacing the current file with it...then demoting the dc and promoting it back again.
0
 
LVL 1

Author Closing Comment

by:Michaelgoff79
ID: 31503834
That took care of it, Thank you very much!
0
 
LVL 19

Expert Comment

by:MrLonandB
ID: 22662062
You're quite welcome...take care.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question