?
Solved

Exchange 2010, Server 2008

Posted on 2013-07-01
8
Medium Priority
?
252 Views
Last Modified: 2013-09-16
A rabid user with administrative rights was "cleaning up ADUC" and decided that the server named "EMAIL" wasn't important.  He deleted it from the domain (using ADUC tool).  This is an Exchange 2010 server (not a DC), the only one on the domain.  Looking for the best/fastest way for getting this back up and running/joined and integrated again?
0
Comment
Question by:pbenningfield
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
8 Comments
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39290969
I presume the user has been fired? If not that should be your first step.

This isn't going to be an easy restore, because you have lost the link between AD and the server. Do you have a backup of the domain that you can restore? I don't think just adding the machine back to the domain is going to work.

Personally there is only one thing I would do here - and that is call Microsoft support (ideally using the culprit's credit card). This is one of those things that you need to get right first time and any bumbling around will decrease the chances of a successful restore. Get Microsoft to do it right, do it first time and that will be the best chance you have.

Otherwise you are looking at a lot of work, building a new Exchange server, then restoring the databases to a recovery database and generally adding everything back in again.

Simon.
0
 
LVL 2

Author Comment

by:pbenningfield
ID: 39291023
Thanks Sembee, calling Microsoft was my next step.... Not my user to fire, but I hope something is done.
0
 
LVL 2

Author Comment

by:pbenningfield
ID: 39291296
Quick question-- where can I find auditing on this action?  I need to prove that this was done, and when.
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39291422
Did you have auditing enabled? If not then it isn't logged. If it was, then it should be on one of the domain controllers.

Simon.
0
 
LVL 2

Author Comment

by:pbenningfield
ID: 39291429
Thanks Simon-- I did, but it doesn't go back that far.  Something as destructive as that should be logged anyway, just my 2 cents.  THANKS, ON CALL BACK WITH MICROSOFT, will advise. :-)
0
 
LVL 2

Accepted Solution

by:
pbenningfield earned 0 total points
ID: 39310912
Hi folks, thanks for the suggestions, I called Microsoft and for the first time my call was "lost" in their call volume. I called back, nagged, emailed, called again, reminded them it was a system down emergency and still nothing for two days.  I finally resolved it myself using AD recycle bin, using this article, then dropping the .local from the domain name (quick trick to try and force it to re-establish the trust.  Also instrumental
as well was this, and manually rekeying all of the attributes (referencing another server that was setup similiarly to figure out which attributes were required) after reading this reference. Last thing was to put the server object back into the correct membership groups, (exchange domain servers, exchange enterprise servers, exchange trusted subsystem, etc.).  Once all this was done, rebooted the server, the services started and all but iphones synchronization was up and running.  Readded/confirmed info in iphones, and things are back to normal.
0
 
LVL 2

Author Closing Comment

by:pbenningfield
ID: 39495672
This fixed it.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Unified and professional email signatures help maintain a consistent company brand image to the outside world. This article shows how to create an email signature in Exchange Server 2010 using a transport rule and how to overcome native limitations …
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses
Course of the Month14 days, 22 hours left to enroll

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question