Re: Domain Controller Deleted (Incorrectly)

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Not sure what flags you set but I would use the following

Run dcdiag, netdiag and repadmin in verbose mode.
-> DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
-> netdiag.exe /v > c:\netdiag.log (On each dc)
-> repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt

**Note: Using the /E switch in dcdiag will run diagnostics against ALL dc's
in the forest. If you have significant numbers of DC's this test could
generate significant detail and take a long time. You also want to take
into account slow links to dc's will also add to the testing time.

When complete search for fail, error and warning messages.



--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Jeffrey Walton" <noloader@xxxxxxxxx> wrote in message
news:1183065497.571793.227280@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Results od DCDiag from the suspect machine (1 of 2 having problems):

C:\>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site\CORPSERVER
Starting test: Connectivity
......................... CORPSERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site\CORPSERVER
Starting test: Replications
......................... CORPSERVER passed test Replications
Starting test: NCSecDesc
......................... CORPSERVER passed test NCSecDesc
Starting test: NetLogons
......................... CORPSERVER passed test NetLogons
Starting test: Advertising
......................... CORPSERVER passed test Advertising
Starting test: KnowsOfRoleHolders
......................... CORPSERVER passed test
KnowsOfRoleHolders
Starting test: RidManager
......................... CORPSERVER passed test RidManager
Starting test: MachineAccount
......................... CORPSERVER passed test
MachineAccount
Starting test: Services
......................... CORPSERVER passed test Services
Starting test: ObjectsReplicated
......................... CORPSERVER passed test
ObjectsReplicated
Starting test: frssysvol
......................... CORPSERVER passed test frssysvol
Starting test: frsevent
......................... CORPSERVER passed test frsevent
Starting test: kccevent
......................... CORPSERVER passed test kccevent
Starting test: systemlog
......................... CORPSERVER passed test systemlog
Starting test: VerifyReferences
......................... CORPSERVER passed test
VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... ForestDnsZones passed test
CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation

Starting test: CheckSDRefDom
......................... DomainDnsZones passed test
CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test
CheckSDRefDom

Running partition tests on : Domain
Starting test: CrossRefValidation
......................... Domain passed test
CrossRefValidation
Starting test: CheckSDRefDom
......................... Domain passed test CheckSDRefDom

Running enterprise tests on : Domain.com
Starting test: Intersite
......................... Domain.com passed test Intersite
Starting test: FsmoCheck
......................... Domain.com passed test FsmoCheck

C:\>


On Jun 27, 6:43 pm, Jeffrey Walton <noloa...@xxxxxxxxx> wrote:
Hi All,

The title says it all.. Someone deleted a Domain Controller by
deleting the computer account in AD. DNS seems fairly clean, but we
are seeing lots of ghosts from the previous controller using ntutils
and adsiedit.

Tapes are no longer available for a non authoritative restore - they
been over written. KB332199 does not really apply. Any guidance on
this would be appreciated.

Thanks,
Jeff
Jeffrey Walton




.

Relevant Pages

  • RE: System cannot log you on error
    ... Running partition tests on: ForestDnsZones ... Starting test: CrossRefValidation ... Starting test: CheckSDRefDom ... No network provider accepted the given network path.. ...
    (microsoft.public.windows.terminal_services)
  • Re: DCDiag.exe errors
    ... > replication attempt failed: ... > Running partition tests on: ... > Starting test: CrossRefValidation> ... > Starting test: CheckSDRefDom ...
    (microsoft.public.win2000.dns)
  • RE: System cannot log you on error
    ... retrieve the ... Running partition tests on: ForestDnsZones ... Starting test: CrossRefValidation ... Starting test: CheckSDRefDom ...
    (microsoft.public.windows.terminal_services)
  • Re: AD troubles
    ... a disk operation failed even after retries." ... Running partition tests on: ForestDnsZones ... Starting test: CrossRefValidation ... Starting test: CheckSDRefDom ...
    (microsoft.public.windows.server.sbs)
  • Re-2: Authentifizierung bremst Reaktionszeit enorm?
    ... Running partition tests on: ForestDnsZones ... Starting test: CrossRefValidation ... Starting test: CheckSDRefDom ... Unterhaltung: Authentifizierung bremst Reaktionszeit enorm? ...
    (microsoft.public.de.german.isaserver)