Domain controller issue - Force current DC to replicate from old DC?

We had two win 2003 DC's, let's call them DC1 and DC2.

We recently took down DC1 (hardware was acting up), leaving just DC2 to run AD.   Due to some bungling on our part we've now messed up some settings in active directory and need to get back to where things were.

Is it possible to re-introduce DC1 and then force DC2 to replicate AD from DC1?  DC1 hasn't been on the network for about 2 weeks, so it's not that it's been down for months.

The issue is that DC2 is also our exchange server, so it's not that I can just take it offline indefinitely.

Help!
KenazoAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike KlineCommented:
where were the FSMO roles and what did you do to them over the last two weeks?

The reason I ask is because if you seized them from DC1 to DC2 then you should not introduce DC1 again.  

If DC1s hardware is now ok and you are ok with the FSMO role issue then yes you can bring it back after two weeks.  Where there are issues is when a DC is offline longer than the tombstone lifetime period (either 60 or 180 days by default)

...but if DC1 is still acting up and you are only running with one DC, what I'd do sooner rather than later is maybe bring up a new box DC3.  Just don't want to be running with only one DC.

Thanks

Mike
0
KenazoAuthor Commented:
If I introduce DC1 again won't it view DC2's copy of AD as more current and replicate from it?  I want to make sure replication goes to DC2, not from it.

DC2 had seized the FSMO roles, since I thought DC1 was permanently retired (and I deleted the account for DC1 from AD, on DC2).
0
sukamtoCommented:
Did you demote DC1?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

KenazoAuthor Commented:
Is it possible to demote a physically dead DC?  I simply deleted the computer's account in AD on DC2.  (which I wish now I hadn't done)
0
AwinishCommented:
You can perform metadata cleanup to remove dead domain controller & also if some records remainging delete it manually & also remove all the records from _msdcs folder in dns as well as from adsiedit.msc.
http://www.petri.co.il/delete_failed_dcs_from_ad.htm
You can't bring back the dc from which you seized roles,if you bring back you will face issues,so its better introduce new dc or you system state backup.
 
0
sukamtoCommented:
you should not do that, you cant just delete a dead DC by simply delete the computer account. even the DC is dead, you still can delete it properly via AD database by this link (use with caution, be careful) http://www.petri.co.il/delete_failed_dcs_from_ad.htm
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
KenazoAuthor Commented:
Thanks, I think I know where I need to go now.
0
AwinishCommented:
I think i have given the solution with link already & its the same link repeated again,got accepted.
http://www.experts-exchange.com/help.jsp#hs=30&hi=416
Please read the EE policy.
 
0
sukamtoCommented:
Sorry Awinish, not really want to repeat yours.
I was late to submit with page still not refreshed yet.
I only knew your post after i submitted. Just coincidence.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.