troubleshooting Question

Failed DCPROMO caused by AD Recycle bin on the first domain controller of a new tree domain

Avatar of David Haycox
David HaycoxFlag for United Kingdom of Great Britain and Northern Ireland asked on
Active Directory
13 Comments1 Solution337 ViewsLast Modified:
We are attempting to add a new (Server 2016) DC at a new AD site.  The procedure is as we have used successfully in the past:

1. Join the head office domain (this works fine) - let's call it ""
2. Promote the machine to be a new DC in a tree domain ("")

This is where we get the errors as follows. From the Directory Service log, ID 2140:
While processing of an Active Directory Domain Services replication request, the Active Directory Domain Services attempted to modify the list of enabled optional features for the forest.  The Active Directory Domain Services is currently enabling or disabling one or more optional features.  Therefore, modifications to the list of enabled optional features for the forest are not being accepted at this time, so the replication request failed.  The Active Directory Domain Services will temporarily discontinue this replication request.  The replication request will be attempted again later. Request Details: Object being modified: CN=BootMachine,O=Boot Attribute being modified: msDS-EnabledFeature Value being modified: 766ddcd8-acd0-445e-f3b9-a7f9b6744f2a Optional feature: Recycle Bin Feature

Event ID 1173:
Internal event: Active Directory Domain Services has encountered the following exception and associated parameters.
Additional Data
Error value:
Internal ID:

Event ID 1168:
Internal error: An Active Directory Domain Services error has occurred.
Additional Data
Error value (decimal):
Error value (hex):
Internal ID:

I have found this article which appears to show the same problem, but there's no solution as yet: Failed DCPROMO - First Domain Controller of a new Child Domain

The Forest Functional Level is Server 2008 R2.  We have tried different domain functional levels for the new DC to no avail.

It looks like it's just a problem with the AD Recycle Bin.  How can we overcome this error and promote the DC?
David Haycox
Consultant Engineer

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 13 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 13 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros