Solved

Cannot demote a DC using DCPROMO  - 'Logon failure: the target account name is invalid.

Posted on 2013-11-13
6
6,367 Views
Last Modified: 2013-11-18
Hi,

I have a urgent need to demote a 2003 DC server. The server was offline for over 60 days and it appears to have tombstoned. The server was offline and due to a network issue and now users are having issues logging in to their workstations, etc

The server has no roles attached to it and is not a GK server. I'm getting replication issues on my good DC.

The error I receive is - The operation failed because:


Managing the network session with  ****.local failed.

'Logon failure. The target account name is incorrect.


How do I demote this server?
0
Comment
Question by:APC_40
  • 3
  • 3
6 Comments
 
LVL 23

Accepted Solution

by:
Thomas Grassi earned 500 total points
ID: 39644787
take a look at this

http://www.petri.co.il/delete_failed_dcs_from_ad.htm#

What errors are you getting? Post
0
 

Author Comment

by:APC_40
ID: 39644847
On my good DC it says in event viewer under directory service -


Event ID  - 2042  -  

Source NTDS replication.

Description - It has neen too long since this machine last replicated with the named source machine. The time between replicatins with this source has excedded the tombstone lifetime. The source machine may still have copies of object that have been deleted.

On the 'bad' DC -


Error event ID  1864  -


The local domain controller has not recently received replication information from a number of domain controllers. The count of domain controllers is shown, divided in to the following intervals.

More thatn 24hrs
2
More thatn a week
2
More than a month
2
More than two months
2
More than a lifetime
2
Tombstone lifetime Days
60
0
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 39644868
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:APC_40
ID: 39645989
Ok I've deleted the DC using the metadata cleanup and it's been removed from DNS. Only 2 DCs are now in AD. I did not DCPROMO /force, i deleted the server through meta data cleanup

Unfortunately I logged on to a few PCs and some allowed access but others did not as before.  I don't understand why sometimes I can logon to a PC but others i can't . The message when trying to logon states 'a domain controller could not be found, etc...'


There was still an issue that when a users password was changed in AD and they were forced to change it, it never asked for them to change it.

Any further guidance?
0
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 39646931
Run this and post results

@echo off
echo "Starting NetDiag on SERVER" >>c:\util\dclogx.txt
netdiag >>dclogx.txt

echo "Starting DCDiag on SERVER" >>c:\util\dclogx.txt
dcdiag >>dclogx.txt
dcdiag /test:registerindns /dnsdomain:FQDN>>dclogx.txt
dcdiag /c /v >>dclogx.txt
dcdiag /test:dns >>dclogx.txt
browstat status -v our >>dclogx.txt

echo "Who owns FSMO Roles" >>dclogx.txt
NTDSUTIL roles Connections "Connect to server SERVER" Quit "select Operation Target" "List roles for connected server" Quit Quit Quit >>dclogx.txt

EXIT


Lets check your AD and DNS
0
 

Author Closing Comment

by:APC_40
ID: 39656061
Cleared the DC using metadatacleanup - cheers all.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
It’s been over a month into 2017, and there is already a sophisticated Gmail phishing email making it rounds. New techniques and tactics, have given hackers a way to authentically impersonate your contacts.How it Works The attack works by targeti…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question