Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


Windows 2008 Domain Controller AD Crash

Posted on 2016-10-24
Medium Priority
Last Modified: 2016-10-27
I have a W2k8 domain controller in a mostly 2012 domain controller network that is not working.  It will not communicate with the other domain controllers in the network.  When I go to Server Manager it shows me that ADDS, File Services, NPAS, and IIS are installed but they all have red X's.  When I run dcpromo on it it tells me:
failed to examine the Active Directory Forest. The error was ldap_search() failed, err=1. 000020EF:SvcErr: DSID-020A1144, problem 5012 (DIR_ERROR), data -1018
Question by:aclaus225
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

Assisted Solution

by:Niten Kumar
Niten Kumar earned 600 total points
ID: 41857796
If you really want to get that DC up an running then check event viewer logs.  It will better help you in figuring out the problem.  Is there any other services running on that domain controller?  If there is no other service running on that dc then best thing would be to demote the DC, force removal if need be. If force removal doesn't work you can shut down the dc and do metadata cleanup and reinstall the 2K8 machine and rebuild the DC.  Let me know what your options are.

Author Comment

ID: 41857807
I am attaching the system log from Event Viewer.
LVL 96

Expert Comment

by:Lee W, MVP
ID: 41857921
If this is not your area of expertise and you don't know how to examine logs or run DCDIAG, then you probably shouldn't be the one responsible for determining the problem.

Start with the event logs - don't post them - ANALYZE them - look for errors that are likely related.  Google.  Cross reference the event id at eventid.net. Run DCDIAG /C /E /V and start troubleshooting.  If this DC has been offline more than 2 months, it's likely tombstoned and permanently dead.  You'll need to remove it from AD as a failed DC and rebuild it.  DO NOT restore it.  Especially since you didn't know this stuff to begin with - restoring without understanding how to can destroy your AD.
Fill in the form and get your FREE NFR key NOW!

Veeam® is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.


Author Comment

ID: 41857988
Thanks for the info. Sadly, I am a one-man shop, so even if things are not in my expertise I still have to fix them. This server has only been offline for 24 hours, not two months. I posted this because I googled the original error and found no responses to that error. I use Expert Exchange in the hopes that someone else has come across the error and has a solution.
LVL 27

Accepted Solution

DrDave242 earned 1400 total points
ID: 41858888
This is significant:

Error,10/24/2016 11:12:25 AM,Service Control Manager,7023,None,"The Netlogon service terminated with the following error:
A device attached to the system is not functioning."

The Netlogon service is very important on a domain controller, and it appears to be crashing on this one. If you open the Services console and try to start that service, does it give that same error or a different one?

There are also errors indicating registry hive corruption. Recovery of the corrupt hive was successful, but the existence of the corruption (and the fact that it's happened more than once) isn't a good sign. This may end with the OS on that DC being reinstalled from scratch.

Author Comment

ID: 41859132
You are probably correct.  On a reboot I cannot even get it to the home screen with Safe Mode.

Author Comment

ID: 41859531
This machine will not boot anymore.  What problems will I have if I install Windows again on this machine and name it the same as it was?
LVL 27

Expert Comment

ID: 41859536
Since the server was a domain controller, you will need to perform a metadata cleanup to remove it from Active Directory. If you plan to give it the same name as before, this must be done before the rebuilt machine can be joined to the domain. (It also lets the other DCs know that this DC no longer exists, so the KCC can reconfigure the replication topology as needed.)

Author Comment

ID: 41859554
In this domain I have six machines that are GCs and then the one that failed is the only one labeled DC.  Are there additional steps besides the metadata cleanup because of that?
LVL 27

Expert Comment

ID: 41859559
No, the metadata cleanup should suffice. There may be an empty container object with the server's name left behind in the Active Directory Sites and Services snap-in after the metadata cleanup completes. You can delete it if you want, but there's no need, especially if the server will be recreated with the same name and re-promoted as a DC.

Author Closing Comment

ID: 41862793
I ended up installing Windows 2012 r2 on the server just to get the data off the machine and not put it back in as a DC.

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Here's a look at newsworthy articles and community happenings during the last month.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Suggested Courses

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question