Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


reinstall active directory remotely ?

Posted on 2013-12-26
Medium Priority
Last Modified: 2013-12-27
hi experts
we have a 2003 remote domain controller that is showing "directory services cannot start" error 0xc00002e1. We are not able to load windows normally. We can remotely access it if someone on site selects safe mode. I have gone through ms kb article 258062 and I am at the point where the ms kb is recommending to reinstall AD. Problem is this server is a 7 hour drive and I want to do this remotely. Any suggestions, guides or recommendations before I run dcpromo ?
Question by:WAMSINC
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

Assisted Solution

by:Brad Held
Brad Held earned 1000 total points
ID: 39741175
So I will assume that there is no system state backup of this server?

When you say safe mode, is that directory services restore mode? I have seen issues where antivirus interferes with lsass, so that may be something to disable before you rebuild.

If I was going down the path of getting the DC happy again, I would perform a metadata cleanup, and a complete wipe and reload of the server, unless you do have a system state backup then I would just reload and restore from backup.

Other than the reboots there should not be a reason that the dcpromo wouldn't work from RDP, its getting it to a state where you can run dcpromo that is going to suck. Does this server have an HP iLo or Dell iDrac card in it?
LVL 26

Accepted Solution

Leon Fester earned 1000 total points
ID: 39741359
We can remotely access it if someone on site selects safe mode.
Does this mean that you do have a resource onsite?

It should be easy to do the necessary then.
Since you cannot remote to the server directly you won't be able to do everything yourself.

You will have to give the person at the remote site a domain admin account in order to do the necessary.

From your side you'll need to do the Meta data cleanup - this is needed to remove all references of the remote DC from AD.

From his side, he'd have to boot into safe mode and then run:
DCPROMO /forceremoval

After the server has been rebooted he'd have to run DCPROMO again on that DC and re-enter the domain admin account credentials.

Once the replication has completed you can should then change the password on the domain admin account if necessary.

Author Closing Comment

ID: 39742195
thanks for the replies guys, Im driving up there saturday with a new server. We are just going to go ahead and do an in place upgrade and refresh the hardware and upgrade from 2k3 to 2k8 while we're at. To answer the question I thought I had a system state back up via DPM but that failed to recover. Because they need to be open for business Friday and Saturday we are just going to let it ride until the weekend. Big problem with not having a tested DR solution.

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The System Center Operations Manager 2012, known as SCOM, is a part of the Microsoft system center product that provides the user with infrastructure monitoring and application performance monitoring. SCOM monitors:   Windows or UNIX/LinuxNetwo…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question