Solved

Exchange 2010, Server 2008

Posted on 2013-07-01
8
250 Views
Last Modified: 2013-09-16
A rabid user with administrative rights was "cleaning up ADUC" and decided that the server named "EMAIL" wasn't important.  He deleted it from the domain (using ADUC tool).  This is an Exchange 2010 server (not a DC), the only one on the domain.  Looking for the best/fastest way for getting this back up and running/joined and integrated again?
0
Comment
Question by:pbenningfield
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
8 Comments
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39290969
I presume the user has been fired? If not that should be your first step.

This isn't going to be an easy restore, because you have lost the link between AD and the server. Do you have a backup of the domain that you can restore? I don't think just adding the machine back to the domain is going to work.

Personally there is only one thing I would do here - and that is call Microsoft support (ideally using the culprit's credit card). This is one of those things that you need to get right first time and any bumbling around will decrease the chances of a successful restore. Get Microsoft to do it right, do it first time and that will be the best chance you have.

Otherwise you are looking at a lot of work, building a new Exchange server, then restoring the databases to a recovery database and generally adding everything back in again.

Simon.
0
 
LVL 2

Author Comment

by:pbenningfield
ID: 39291023
Thanks Sembee, calling Microsoft was my next step.... Not my user to fire, but I hope something is done.
0
 
LVL 2

Author Comment

by:pbenningfield
ID: 39291296
Quick question-- where can I find auditing on this action?  I need to prove that this was done, and when.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39291422
Did you have auditing enabled? If not then it isn't logged. If it was, then it should be on one of the domain controllers.

Simon.
0
 
LVL 2

Author Comment

by:pbenningfield
ID: 39291429
Thanks Simon-- I did, but it doesn't go back that far.  Something as destructive as that should be logged anyway, just my 2 cents.  THANKS, ON CALL BACK WITH MICROSOFT, will advise. :-)
0
 
LVL 2

Accepted Solution

by:
pbenningfield earned 0 total points
ID: 39310912
Hi folks, thanks for the suggestions, I called Microsoft and for the first time my call was "lost" in their call volume. I called back, nagged, emailed, called again, reminded them it was a system down emergency and still nothing for two days.  I finally resolved it myself using AD recycle bin, using this article, then dropping the .local from the domain name (quick trick to try and force it to re-establish the trust.  Also instrumental
as well was this, and manually rekeying all of the attributes (referencing another server that was setup similiarly to figure out which attributes were required) after reading this reference. Last thing was to put the server object back into the correct membership groups, (exchange domain servers, exchange enterprise servers, exchange trusted subsystem, etc.).  Once all this was done, rebooted the server, the services started and all but iphones synchronization was up and running.  Readded/confirmed info in iphones, and things are back to normal.
0
 
LVL 2

Author Closing Comment

by:pbenningfield
ID: 39495672
This fixed it.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
A hard and fast method for reducing Active Directory Administrators members.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question