2nd domain controller removed

I removed 2nd domain controller from Active Directory Domain Controllers, from that time my first domain controller in unavailable. i cannot ping my first DC and i cannot login any client to domain...can anyhelp help me please asap.

Thanks

Adnan J IqbalNetwork EngineerAsked:
Who is Participating?
 
AustinComputerLabsCommented:
Start with:
From: http://support.microsoft.com/kb/555846

then go through this:
The following knowledgebase will help you to remove completely orphaned Domain Controller

http://support.microsoft.com/kb/555846
0
 
AustinComputerLabsCommented:
Do you have the removed DC's IP address in your IP configuration under DNS server?
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
do i have to remove the ip from DNS if its listed there? Can i bring my first domain controller up with all settings and users...???im afraid..
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
AustinComputerLabsCommented:
Did you run DCpromo to demote the removed DC or did you just delete it from AD?

What is your goal for this operation?
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
my first DC is my DNS server, i dont want to loose anything from my first DC ...what do i have to do to bring my first DC up??
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
well, i just removed second DC from Active Directory...coz i was just facing some errors in event viewer that it was not replicating with DC2. because 1 week back i have formatted second domain controller from my domain..but when i removed the account from the active directory, my first DC is down.
 
0
 
AustinComputerLabsCommented:
Breath and relax,
you going to have to take me through this slowly with more detail.

What exactly did you do and what was the goal you were doing it to accomplish.
0
 
hmarcbowerCommented:
Is the DC that's no longer available actually the first one you had active directory installed on?
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
i used to have 2 domain controllers in my network, in first dc i have dhcp, dns, and exchange servr, on second dc i dont have anything other than 2nd domain controller, i formatted 2nd domain controller 3 days back, and everything was working fine in my first DC till 1 hour before, i just noticed on first DC some errors in event viwer that dc2 is nt replicating, so i deleted the account of second dc from active directory and restarted the server, and i cannot ping my first dc anymore....i cant login any client to domain as well....i want to bring my first dc up asap..
0
 
AustinComputerLabsCommented:
For future reference the correct way to remove a domain controller is to demote it using DCPROMO. If you do not demote it you have what is called an orphaned domain controller that is a longer process to remove.

What operating system is the current domain controller?
What operating system was the removed domain controller?
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
current domain controller is having win server 2003 and removed domain controller was also win2003 server
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
will my first dc will come up after this with all services??
0
 
AustinComputerLabsCommented:
The first step is to clean the old DC out of AD, then if you still have issues it should be fairly easy to restore services on the current DC.

Orphaned DCs can create all kinds of issues until they are properly removed.
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
what if i install win2003 server on other machine and make it dc2 , will my dc1 become online??
0
 
AustinComputerLabsCommented:
No the unique identifiers that AD uses to identify your old DC willnot be the same even if you give it the same name. Unfortunately you will need to follow the steps I have given you.

The good news is it will most likely resolve your issue ;-)
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
so all these steps i have to take in my current DC???
as i cannot login to domain now, do i have to take these steps in local admin account???
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
what about my exchange server , dns and dhcp settings,, all will remain same??
0
 
ReneGeCommented:
No

Have you considered:

1) Make sure that DC1 has all of the FSMO roles.
http://support.microsoft.com/kb/324801

2) That your DNS services settings points to DC1
http://support.microsoft.com/kb/825036

3) That your PCs and DC1 uses DC1 as DNS server.

Cheers,
Rene
0
 
AustinComputerLabsCommented:
Can you log onto the current DC with the administrator account?

Make sure that the network card config has no references to the orphaned DCs IP address.
0
 
ReneGeCommented:
My NO was answering the following question:

"so all these steps i have to take in my current DC???
as i cannot login to domain now, do i have to take these steps in local admin account???"
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
well, i did this mistake remotely on DC, so i have to rush to my office to face the situation. and i still have 5 hours to open my office...i will remove the orphaned dc ip address from the network before i start the solution...
will i able to login to domain while my dc is not responsive
do i have to take all these steps in local admin account??
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
my second domain controller is no more existing while my first dc is down, but i have a machine running with the same ip which was given to second domain controller...
0
 
AustinComputerLabsCommented:
You should be able to log onto the remaining DC at the console and apply the repair.
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
so u mean i will be able to login to current dc ...and i can apply the repair....i didnt ruined anything with dns, or dhcp, i just removed nonexisting Domain controller account name from Active Directory. Hope i get everything back after i repair!!
0
 
AustinComputerLabsCommented:
This happens often when a DC crashes and burns since it is dead there is no way to properly demote it and usually it all comes back once removed from AD.
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
u mean, once dc2 will be removed from AD, everything will come back to normal ???
0
 
AustinComputerLabsCommented:
It should and if not it is almost always something we can fix.
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
well thats a good news for me, my first domain controller is running fine with all services....I didnt take any steps, i step to my office and restarted the server only. Do i have to take any steps to make sure everything is ok?

I found some warning messages in event viewer

Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source.  It is recommended that you either configure a reliable time service in the root domain, or manually configure the PDC to synchronize with an external time source.  Otherwise, this machine will  function as the authoritative time source in the domain hierarchy.  If an external  time source is not configured or used for this computer, you may choose to disable  the NtpClient.


2. DC=aqeelah,DC=local
Source domain controller:
CN=NTDS Settings,CN=TEST,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=aqeelah,DC=local
Source domain controller address:
bc75d12c-6054-4142-802f-e9700da88a3e._msdcs.aqeelah.local
Intersite transport (if any):
 
 
This domain controller will be unable to replicate with the source domain controller until this problem is corrected.  
 
User Action
Verify if the source domain controller is accessible or network connectivity is available.
 
Additional Data
Error value:
8524 The DSA operation is unable to proceed because of a DNS lookup failure.
0
 
AustinComputerLabsCommented:
You will want to remove the orphaned DC, but this will give you time to look over the process and do it slowly.
I am glad it is now working for you.
0
 
Adnan J IqbalNetwork EngineerAuthor Commented:
Thanks for your help Dear!!
Appreciate....
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.