Solved

Need to raise domain functional level but cannot due to irrecoverable 2000 DC

Posted on 2012-03-10
6
307 Views
Last Modified: 2012-03-28
I have a total of 3 DC's. 2 of them are windows 2003 servers and the operations master and schema master is one of the 2003 DC's. I need to raise the domain functional level to 2003 to prep for a new 2007 exchange server but cannot because it recognizes that there is a DC in the forest that is not the correct version. I would normally do a dcpromo down but the server is in a failed state. I've tried recovering it but have not had any luck. Is there any other way to remove the 2000 DC from the scenario so that I can do what needs to be done?
0
Comment
Question by:J C
6 Comments
 
LVL 95

Accepted Solution

by:
Lee W, MVP earned 500 total points
ID: 37706150
Perform a system state backup on all existing dcs and then follow the directions here:
 http://www.petri.co.il/delete_failed_dcs_from_ad.htm
0
 
LVL 21

Expert Comment

by:RK
ID: 37706189
Hi,

Since the failed DC is not recoverable, I would suggest you to sieze the fsmo roles from the failed DC to the working one and perform a dns cleanup for the failed DC then you will be successfully able to raise the functional level.

Have a look at this tech article which details the steps to sieze the roles http://www.petri.co.il/seizing_fsmo_roles.htm

Please let me know the outcome and "Good Luck"
0
 

Author Comment

by:J C
ID: 37706213
Looks like the FSMO roles all belong to the 2 operational 2003 DC's.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 12

Expert Comment

by:Mahmoud Sabry
ID: 37706292
first u need to delete the dead DC from the ADSI database, follow the link below

http://www.petri.co.il/delete_failed_dcs_from_ad.htm
0
 
LVL 95

Expert Comment

by:Lee W, MVP
ID: 37706316
@msabry06

A little late - any reason you're posting the exact same information I did?
0
 
LVL 12

Expert Comment

by:Mahmoud Sabry
ID: 37706342
@leew

i'm so sorry, i didn't notice this.......
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Account lockouts 22 69
Mac devices Integration with Active Directory 3 45
Windows DNS Zone for a Host 2 51
PowerShell:  Add Header to Out-File 2 22
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now