2008 Server Secondary DC not joining domain

Steve Marin
Steve Marin used Ask the Experts™
on
Experts,

I had to rebuild a virtual server that acts as our secondary DC. I'm now trying to rejoin it to the domain so it can function as a "backup" domain controller. Problem is when I try and join it to the domain I get the error:

the following error occurred attempting to join the domain the specified account already exists.

Open in new window

Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Adam BrownSenior Systems Admin
Top Expert 2010

Commented:
Search your AD for a computer that has the name of the computer that you are trying to join. If the host name already exists in AD, it will prevent you from joining the Domain. You'll need to either rename the server or remove the existing object.
Steve MarinIT Consultant

Author

Commented:
It exists under the folder Domain Controllers. Is it ok to remove it from there?
Adam BrownSenior Systems Admin
Top Expert 2010

Commented:
Only if you are certain that the system with that name doesn't actually exist yet. If you created the account in AD before adding the server, you should be able to safely remove it. Just be aware that if there is a server with that name acting as a DC you can cause some problems by removing it (there is some low level information in the Active Directory Database that isn't removed when you remove a DC account).
Exploring ASP.NET Core: Fundamentals

Learn to build web apps and services, IoT apps, and mobile backends by covering the fundamentals of ASP.NET Core and  exploring the core foundations for app libraries.

Commented:
It sounds like you still have data from the old DC in your AD. You will need to do a metadata cleanup of that data. You can follow these steps.

http://support.microsoft.com/kb/216498
Top Expert 2013

Commented:
If it exists under the Domain Controllers make sure the DC was removed properly.  
You can go through the metadata cleanup procedures (From a good DC)
http://www.petri.co.il/delete_failed_dcs_from_ad.htm
 
Thanks
Mike
Steve MarinIT Consultant

Author

Commented:
Here is what happened, we deleted the virtual disk that was our secondary dc, it's name was CCCHPDC02, we also have currently and is our main DC named CCCHPDC01. We just did a fresh install of 2008 server and just want to make it like before so we gave it the same name and just want to join it and let it be a secondary DC in case CCCHPDC01 ever goes down.
Adam BrownSenior Systems Admin
Top Expert 2010

Commented:
Well, then you'll need to follow the instructions given by Ken and MIke. If a DC fails, you need to clear it from active directory and do a metadeta cleanup to purge the low level data. If you don't do that, it can cause a lot of problems. Once all that's done, you should be able to add the new DC without any problems.
Top Expert 2013
Commented:
I just realized something with your last comment, since this is a 2008 domain and server then yes you can just remove the box from ADUC.
Metadata celanup got much in 2008, oz has a good entry   http://smtp25.blogspot.com/2008/10/server-2008-metadata-cleanup.html
...and good work getting a second DC up.  We see so many question where people run with one DC and that thing goes down hard.
Make the new DC a DNS server (assuming you are running DNS on server 1) and a GC too.
Thanks
Mike
Steve MarinIT Consultant

Author

Commented:
@mkline71, awesome that worked, thanks so much! That was very easy compared to if this was not a 2008 server. thanks all!
Steve MarinIT Consultant

Author

Commented:
Thanks!
Top Expert 2013

Commented:
Glad to help out,  just a heads up, you can also split points when you close out the question.
In this case Ken and AC also provided good info (for a split)
Thanks
Mike

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial