Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

2008R2 Demote DC & Repromote best practice

Posted on 2013-01-29
4
Medium Priority
?
2,123 Views
Last Modified: 2013-02-03
I have 2 x 2008R2 servers with AD server roles.

the secondary one (SERV2) has gone into USN rollback state from what i can google.
The Active Directory Domain Services database has been restored using an unsupported restoration procedure.
 Active Directory Domain Services will be unable to log on users while this condition persists. As a result, the Net Logon service has paused.


Will have to ask the other IT support if they had to do this before xmas when making some other changes to this system. May be causing some logon issues.

the primary (SERV1) has all FSMO roles. (netdom query fsmo)

SERV1 has AD, App, DHCP,DNS,Print & WebIIS roles. (and is the main intranet server)
SERV2 has AD,DNS,FileServ roles.

what is the best / quickest way to resolve this as the secondary machine is also the file server so repeated reboots can cause interuptions.

is removing the AD role from Serv2 , reboot , Add AD role and reboot the best way to clean up the mess ?  or is dcpromo from command line more appropriate ?
0
Comment
Question by:Robberbaron (robr)
  • 2
4 Comments
 
LVL 3

Accepted Solution

by:
peter_fleur earned 900 total points
ID: 38830228
If you did not make any changes in the AD on the SERV2, i would demote, reboot and promote and reboot. It won't take a lot of time but you have to reboot.

Peter
0
 
LVL 4

Expert Comment

by:palicos
ID: 38830497
0
 
LVL 33

Assisted Solution

by:Robberbaron (robr)
Robberbaron (robr) earned 0 total points
ID: 38830555
i ve seen the links.

in terms of demoting, my question was wether to
a.  remove the AD role from the server, or
b. to run dcpromo /forceremoval and the re-enable via dcpromo  http://support.microsoft.com/kb/332199


option a. makes most sense to me if possible,


see EE blog ....
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/A_2182-Removing-Failed-DC-Data-From-Active-Directory.html

this worked fine.
0
 
LVL 33

Author Closing Comment

by:Robberbaron (robr)
ID: 38848343
Further reading shows that adding the AD role to server only adds executables, which dcpromo does anyway.

We tried to run dcpromo but it would not do so cleanly, pointing at forceremoval .... then

I completely missed an EE blog on this question !!

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/A_2182-Removing-Failed-DC-Data-From-Active-Directory.html

this worked fine.
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Understanding the various editions available is vital when you decide to purchase Windows Server 2012. You need to have a basic understanding of the features and limitations in each edition in order to make a well-informed decision that best suits …
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

579 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question