AD server at remote location tombstoned

We have a ad server at a remote location which I believe became tombstoned (need to verify but its been more then 60 days so it should be), which is having trouble replicating and pc's there can not connect back in to the network now that the server is back in place.

Do I want to demote it as a AD server then readd it back in, or do I want to try to fix the tombstoning.  There is one pc which is out of wack (reauthenticated to the AD server which is tombstoned, which I realize now will be a problem when I go to fix things).

It is also hosting DNS, DHCP, Printing and file serving at this location.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike KlineCommented:
I'd probably demote/promote,  you won't be able to cleanly demote it so you would use

dcpromo /forceremoval

Then from a good DC clean that DC out (metadata cleanup)

Once the metadata cleanup has replicated you can add the server back to the domain and promote it again.

You also need to see if you can fine the issue as to why it didn't replicate for so long.

What does repadmin /showreps look like on the box?



Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
CoffeeBlackAuthor Commented:
repadmin /showrepl mysrvr* /verbose /all /intersite >d:\data_files\it\repl.txt
dcdiag /v /c /d /e /s:mysrvr >d:\data_files\it\dcdiag.txt
dnslint /ad /s "myipaddress"

script ftw...

But yea it looks bad, hasn't replicated in 80 days, the server itself was down and not at all a high priority, and folks were just connecting over the vpn connection.  There's a little more to the story...but doesn't really matter at this point now that we're able to bring it back up.
CoffeeBlackAuthor Commented:
Will I need to remove the server from sites and services as well from the other side, before re-promoting it?
Mike KlineCommented:
Yes delete it out of sites and services.


It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.