problem to rise the forest functional level

We alredy migrated all the DCs of a domain, from Windows 2003 to Windows 2012-R2. Now we want to rise the domain and the forest to Windows 2012-R2.  We already reviewd that all sites have only Windows 2012-R2 DCs.  We alredy review in DNS that there is not old records related to previous Windows 2003 DCs.  If trying to rise the forest level from the AD Administrative Center, it says it is not possible to rise because the domain includes old DCs, same for forest rise.  Both offeres option save as, but the files generated do not says wich is the old DC.  When using AD Domain and trusts, for forest rise, we get the error:  The NTDS-DSA object CN=NTDS Settings, CN=LostandFoundConfig,CN=Configuration,DC...domain name... is not properly configured and is preventing the forest functional level from being raised.  It refers to the DC xxx ... Delete this object using the ADSI Edit.  I looked in the metadata through ntdsutil, but the site refered does not existe, neither the DC. In the LostAndFound recipient, there is no reference to that object.  If I look with ADSI Edit, in the configuration context, in CN=LostAndFpoundConfig, it is the entry for CN=NTDS Settings, if I view the properties, in the Atribute lastknownParent, it refers to the names DC xxx.  Is it possible (safe) to delete this entry directly in the ADSIEdit?  or how can I update this last object so it does not refer to the old DC?  (I do not know if this entry (CN=NTDS Settings) inside the path specified is a neccesary entry that should be updated insted of deleted).
error.docx
FRANCISCO MENDEZAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

it_saigeDeveloperCommented:
First you need to verify that the DC indicated (in your case BCU-DC) is offline.  If it is offline and cannot be turned back on then you need to perform a metadata cleanup of active directory to remove this server and all references to it.

If it is offline but can be brought back online, do so and rerun DCPROMO on the server to remove it from active directory.

If it is still online, then this server needs to be demoted.

More information on performing metadata cleanup: Clean Up Server Metadata

-saige-
0
FRANCISCO MENDEZAuthor Commented:
we alredy executed all metadatacleanup with ntds util.  The old site of the old DC does not exists any more (in the metadata neither in the AD Sites and Serves).  So it is not possible also to find any more in the metadata.  ntdsutil only shows the current live sites.
0
it_saigeDeveloperCommented:
If it is being detected by the Raise Forest/Domain Functional Levels snap-in, then it is in AD somewhere.  Just in case this is not a replication issue, have you looked in ADSIEdit on the server that fails to run the snap-in?

-saige-
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

FRANCISCO MENDEZAuthor Commented:
yes, as described in the initial description:   If I look with ADSI Edit, in the configuration context, in CN=LostAndFoundConfig, it is the entry for CN=NTDS Settings, if I view the properties, in the Atribute lastknownParent, it refers to the names DC xxx.  
so the questio is...
Is it possible (safe) to delete this entry directly in the ADSIEdit?
 or how can I update this last object so it does not refer to the old DC?  
(I do not know if this entry (CN=NTDS Settings) inside the path specified is a neccesary entry that should be updated insted of deleted).
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
FRANCISCO MENDEZAuthor Commented:
solved with other Experts Exchange articles already in DB
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.