Solved

FSMO Roles Issue

Posted on 2011-02-23
6
464 Views
Last Modified: 2012-05-11
Hi,

We recently moved all of the FSMO roles from our 2003 server over to our 2008 server. We had an image created of the 'C' drive that was created before moving the roles over. Last week our server crashed and we were forced to bring it back to life using the image that we had stored on an external drive.

Now that the server has come back to life it has caused serious problems, probably because the FSMO roles were part of that image.

What is the best way to resolve the current problems that we are seeing?

ElliTech
0
Comment
Question by:ellitech
  • 3
  • 2
6 Comments
 
LVL 27

Accepted Solution

by:
KenMcF earned 334 total points
ID: 34966226
As you found out you should never image a DC.

On the DC that crashed take it off the network ASAP run "DCPromo /forceremoval"
Then on the 2008 DC run a metadatacleanup of the old server, link below.
Run "netdom /query fsmo" on the 2008 DC to verify that it holds all roles.
Run DCDiag to verify no errors.

http://support.microsoft.com/kb/216498
0
 
LVL 95

Assisted Solution

by:Lee W, MVP
Lee W, MVP earned 166 total points
ID: 34966240
I would say forcibly demote EVERY SERVER EXCEPT the current (desired) FSMO master (demote AFTER removing them from the LAN - they shouldn't be able to talk to any other DC or to the FSMO master), then do a metadata cleanup deleting existing DCs from the FSMO master.  You may also have to DELETE accounts - both computer and user - created from the point at which you created the backup that you eventually restored). Then re-promote the old DCs back to be DCs.

Mind you, I've never had to do this, but to me, logically, it should work.  The FSMO masters govern who gets what resources to work with... So by removing ALL DCs, there are no "outstanding" resources, only the ones on the remaining (FSMO Master) DC.  When you promote new DCs, they should get new blocks to work with and things should return to normal... by leew logic at least.  

And if that doesn't work, you'll probably have to rebuild from scratch (this is the reason Microsoft does not support or recommend using imaging as a backup solution, ESPECIALLY on DCs).
0
 

Author Comment

by:ellitech
ID: 34966325
Just a quick question, if we demote the 2003 server down to a member server would it be OK to leave it like that temporarily? We are looking to virtualize the 2003 server and that is why the FSMO roles were moved to the 2008 server.

ElliTech
0
Swamped with email signature updates?

Have you been given a load of changes to make to your users’ email signatures? Having to manually implement multiple signatures for every department? Let Exclaimer save you from being swamped with email signature updates!

 
LVL 27

Assisted Solution

by:KenMcF
KenMcF earned 334 total points
ID: 34966438
I would remove from the network first and then do the metadatacleanup. Make sure the 2008 server is error free and everything is working. Then plug the 2003 server back into the network and add back into the domain.
0
 
LVL 27

Expert Comment

by:KenMcF
ID: 34966447
Missed a part should have been

I would remove from the network first and then do the "DCPromo /forceremoval" and the metadatacleanup cleanup on the 2008 server
0
 

Author Closing Comment

by:ellitech
ID: 34966453
Thanks for your help

ElliTech
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Problem with Powershell 15 42
Windows 10 and WSUS 3.2 5 48
Problem to search 5 26
Help with Robocopy switches following Home Folders migration failure 3 27
If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now