Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 672
  • Last Modified:

I need some help decommissioning a tombstoned Exchange server - getting all kinds of AD errors

Hi all,

So I migrated from Exchange 2007 to Exchange 2013, and everything went well. I shut off the 07 server once everything was done to be sure there were no connections to the old server and test new server functionality on its own.

I left the old server off for quite awhile, about 3 months.
Today I booted it up to remove Exchange 07 and demote it from being a DC, etc.. and am getting all sorts of Active Directory errors - I think due to the tombstone time frame.

I need some help working through this to be sure AD stays in good shape, and safely decommission the old server. Anyone feel up to this?
0
CoSmismgr
Asked:
CoSmismgr
  • 5
1 Solution
 
CoSmismgrAuthor Commented:
When I attempt to open AD Users & Computers on the old server I get:
 "Naming information cannot be located because: The target principal name is incorrect."


When I attempt uninstall E2K7 (Remove Mailbox, Client Access, Hub Transport and Mgmt Tools) I get the following:

Summary: 3 item(s). 0 succeeded, 3 failed.
Elapsed time: 00:00:44


Mailbox Role Prerequisites
Failed

Error:
You must be a member of the 'Exchange Organization Administrators' or 'Enterprise Administrators' group to continue.
Recommended Action: http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.12&id=1d750594-9222-44d7-8f80-45e522e889e6

Error:
Setup encountered a problem while validating the state of Active Directory: An Active Directory error 0x8007203B occurred while searching for domain controllers in domain ci.soldotna.ak.us.local: A local error has occurred.


Error:
The clustered mailbox server removal cannot continue: Unexpected error [0xCC55F834] while executing command 'set-ClusterPassiveNodeDefaults -InstallMode:uninstall -DomainController:'' -ActiveCmsUninstall:('false' -eq 'true') -whatif'.

Error:
Cannot find at least one global catalog server running Windows Server 2003 Service Pack 1 or later in the local Active Directory site.
Recommended Action: http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.12&id=67aca4a0-bc3f-4f8f-8297-b13e0d347942

Elapsed Time: 00:00:39


Client Access Role Prerequisites
Failed

Error:
Setup encountered a problem while validating the state of Active Directory: An Active Directory error 0x8007203B occurred while searching for domain controllers in domain ci.soldotna.ak.us.local: A local error has occurred.


Error:
Cannot find at least one global catalog server running Windows Server 2003 Service Pack 1 or later in the local Active Directory site.
Recommended Action: http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.12&id=67aca4a0-bc3f-4f8f-8297-b13e0d347942

Elapsed Time: 00:00:02


Hub Transport Role Prerequisites
Failed

Error:
Setup encountered a problem while validating the state of Active Directory: An Active Directory error 0x8007203B occurred while searching for domain controllers in domain ci.soldotna.ak.us.local: A local error has occurred.


Error:
Cannot find at least one global catalog server running Windows Server 2003 Service Pack 1 or later in the local Active Directory site.
Recommended Action: http://go.microsoft.com/fwlink/?linkid=30939&l=en&v=ExBPA.12&id=67aca4a0-bc3f-4f8f-8297-b13e0d347942

Elapsed Time: 00:00:02
0
 
Simon Butler (Sembee)ConsultantCommented:
Did you remove Exchange before running DCPROMO on it?
As it was a domain controller you shouldn't have left it off for so long.

Rebooting other domain controllers and Exchange servers should go someway to sorting out the mess.
If Exchange wasn't removed, I would also do that as Exchange on a DC causes interesting problems with other Exchange servers.

Simon.
0
 
CoSmismgrAuthor Commented:
I haven't run DCPROMO on it yet. I realize I shouldn't have left it off for so long, but nothing I can do about that now :/

I will reboot other domain controllers and the new exchange server this evening and report back tomorrow.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
Will SzymkowskiSenior Solution ArchitectCommented:
I would recommend doing the following...
- Power off the old DC/Exchagne 2007 server

Is your FSMO holder a DC the is in a good clean state? if so proceed...

Run the following command on your Good working DC

netdom query fsmo
Make sure that the old DC (that has been powered off does not hold any FSMO roles)

If the above is true and the tombstoned DC does hold ANY FSMO roles make sure that you Seize the roles to a working DC.

Seize FSMO Roles

If your old DC does not hold any FSMO roles proceed below...
- Perform Metadata cleanup Metadata cleanup
- Open Sites and Services, Delete any Computer objects for this old DC
- Open DNS Manager under the _msdcs folder and delete any SRV records that are present in GC\DC\Kerberos\LDAP\etc

Exchange Part
Once your DC has been cleaned up you will need to use ADSIEdit to remove Exchange.

Remove Exchange 2007 using ADSIEdit.msc

Will.
0
 
CoSmismgrAuthor Commented:
Will, I will do this since it can be done without waiting for the reboots. I will post back with any issues.
0
 
CoSmismgrAuthor Commented:
Will, that was the perfect way to do it! Thank you so much
0
 
CoSmismgrAuthor Commented:
Very accurate, and precise directions. No problems at all performing what I needed to do.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now