Domain Controller does not recognize the domain, on computer object can be found.

Posted on 2009-12-29
Medium Priority
Last Modified: 2012-05-08
I have opgraded my domain from 2008 to 2008R2 DCs. My other 2008 DCs decommissioned easily. This last one says it cannot find the domain or cannot find its computer object in the DC,

The computer object does exist and it recognizes that the new DC is the master.

Any ideas on how to decommission this DC?
Question by:jimmylew52
LVL 57

Accepted Solution

Mike Kline earned 2000 total points
ID: 26142960
So this 2008 box is not demoting gracefully using dcpromo.
If it was a 2003 box you would have to go through the metadata cleanup process using ntdsutil.   http://www.petri.co.il/delete_failed_dcs_from_ad.htm
In a 2008 domain like you have you can delete the object in AD and the metadata cleanup will happen behind the scenes.  Oz has a good blog entry explaining the old way and the new method for 2008
or the Microsoft article here: http://technet.microsoft.com/en-us/library/cc816907(WS.10).aspx

Expert Comment

ID: 26143173
I had this problem and I tried to remove it gracefully but it failed. I used Dcpromo /forceremoval and this worked great! However, I used it because Dcpromo kept failing to remove the DC. I then removed and readded it as a member server.
LVL 24

Expert Comment

ID: 26145156
Yes, you can use dcpromo /forcereoval & can do metadata cleanup using ntdsutil tool.

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question