Posted on 2009-04-24
Last Modified: 2012-05-06
I'm trying to DCPromo a server 2003 Domain Controller to remove it from AD and Im receiving two error messages. One I have attached as a BMP file. I get the BMP file error first then after hitting ok I see the following

The operation failed because:
Active Directory could not transfer the remaining data in directory partition DC=msek,DC=com to domain controller
"The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime."

What steps should i take to remove this server from AD.
Question by:Ekuskowski
    LVL 27

    Assisted Solution

    Did you have replication issues with this DC (well it looks like you did, for about 60 days by the sounds of it)? Were you aware of any issues? Is the other server still up and running?
    How many other DCs are there on the network, and where do your FSMO roles lie? My only reservation is that if you've been making changes on this DC which haven't been replicated, then you remove this DC forcibly you're going to lose those changes.
    To remove a failed DC from AD you will need to perform a metadata cleanup :, but I would first try to troubleshoot the replication issues.
    LVL 18

    Assisted Solution

    has this server been offline for quite some time (more than 60 days)?
    If so, you'd better shut down (disconnect from the network) it immediately and manually remove it from your AD

    Author Comment

    No changes would have been made on this Domain controller.
    The domain controller was and is having replication problems. I see errors dating back 4 months.
    The server has no FSMO roles.
    We have 4 other Domain controllers at this time, but are planning on retiring/ demoting two of them.
    The other servers are not having replication issues

    If I forcibly remove the server, will all remnants of the DC be removed from AD ?
    I'll review the two links the two of you provided.

    LVL 27

    Expert Comment

    I think both links refer to the same process.
    If you follow this link to remove the server, then all remnants will be removed from AD, but I would be careful that you haven't been making changes on this DC that will be lost. I would imagine you would have come across problems before now if this was the case (users not being able to log on etc), but I would check to be sure.

    Accepted Solution

    We have been running some tests on the server

    DCDIAG, replication tests (replmon), and funny all the tests passed. But everytime we ran dcpromo we would have the same problems.

    We made no setting changes but for some reason DCPROMO worked this time. So now my DC has been removed and no longer shows up in sites and services

    So my issue is now resolved , thank you all for your help

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    I'm sure that every Windows systems administrator has written, or at least used, a batch or VBS login script at some point in their career, whether it is to map network drives, install printers, or set some user preferences.  No more! With Window…
    Companies that have implemented Microsoft’s Active Directory need to ensure that the Active Directory is configured and operating properly. If there are issues found and not resolved, it eventually leads the components to fail or stop working and fi…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    794 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now