Remove Stale DC

Hi Experts,

In active directory I have a server listed as a DC that is no longer serving that role.  It appears the server at one point was reloaded, but the admin failed to demote it before proceeding.  In addition, the server was renamed exactly the same and rejoined as the member of the domain.

All roles and services are running properly on their corresponding servers, and their are no roles to seize back.

Since a replacement server has been installed on the network with exact name I am unsure if I can run the standard remove orphaned DC procedure.

Any suggestions on how to move forward?  (besides renaming the server?)

Thanks
gws226Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike KlineCommented:
When you go through the metadata cleanup process do you see the old  and new server listed?
http://msmvps.com/blogs/ad/archive/2008/12/17/how-to-remove-a-failed-or-offline-dc.aspx
Thanks
Mike
 
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
bluntTonyHead of ICTCommented:
So you have two machine accounts in AD with the same name, one is a DC and one a member? Where are you seeing the DC listed?

If it's in AD Sites and Services or DNS, then you could just delete the relevant objects.
0
bluntTonyHead of ICTCommented:
Sorry, to clarify, what I meant to say was -

If it's JUST in AD Sites and Services or DNS, and event logs/DCDIAG etc are not showing errors relating to this DC, then you could just delete the relevant objects.
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

gws226Author Commented:
It shows my current DCs correctly.
0
gws226Author Commented:
you type faster then I do.  :)

I suspect that was the case.  Its OK to delete from Sites and Services then?  (its actually an exchange box so I'm really looking for some solid confirmation before proceeding.

Thanks.
0
bluntTonyHead of ICTCommented:
If it's only showing in AD Sites and Services, and you have no errors in DCDIAG on other DCs, the machine isn't in 'Domain Controllers' in ADUC, and the other servers in AD Sites and Services do not have connection objects linking to it, then you can just delete the object. It's a leftover from the metadata cleanup.

In fact, every time I've ran a metadata cleanup in ntdsutil, I've had to manually delete the server object from AD Sites and Services.

I know Mike's already posted a link on the procedure, but this one also details some steps you have to carry out after ntdsutil, including deleting the server object from ADSS.

http://www.petri.co.il/delete_failed_dcs_from_ad.htm

Tony


0
Mike KlineCommented:
Yes, I second the sites and services answer...it is ok to delete it.
Thanks
Mike
0
gws226Author Commented:
[quote]
If it's only showing in AD Sites and Services, and you have no errors in DCDIAG on other DCs, the machine isn't in 'Domain Controllers' in ADUC, and the other servers in AD Sites and Services do not have connection objects linking to it, then you can just delete the object. It's a leftover from the metadata cleanup.
[/quote]

Typo on my part.

It appears in ADUC but not in Sites and Services.
0
gws226Author Commented:
The previous administrator also did some permission changes that prevented proper demotion of the DCs.  In addition to Mkline71's steps, I also had to change the security permissions as outlined here.

http://www.experts-exchange.com/Networking/Windows_Networking/Q_21548491.html
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.