Re: Remove Ghost DC from AD

I believe he missed the ADSIEdit piece in sysvol. This sounds exactly like
what you would be experiencing.


--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


"Francisco Duran" <fduranm@xxxxxxxxxxx> wrote in message
news:%23eGACP8iFHA.1048@xxxxxxxxxxxxxxxxxxxxxxx
>A hardware problem forced us to remove a DC-controller from our network.
>The roles were taken by other DCs and as a gracefully demotion couldn't be
>performed, we had to clean-up the metadata following instructions from:
>
> http://www.petri.co.il/delete_failed_dcs_from_ad.htm
>
> This worked just fine but now the problem is that in the ACtive Directory
> Users and Computers, in the Domain Controllers container, there's still
> information for that DC.
>
> We've tried to delete the server from the list and it gives the following
> message: The DSA object cannot be delete.
>
> It seems that it cannot be deleted as the server is registered in the
> active directory as having a userAccountControl number of: 524288 which
> means the server is trusted for delegation.
>
> When we try to uncheck that option from the AD Users and Computers, it
> shows the message: "Your security setting do not allow you to Specify
> whether or not this account is to be trusted for delagation".
>
> We even changed the GPSO to allow: "Enable computer and user accounts to
> be trusted for delegation" and then tried to change this
> userAccountControl value using even the ADSI Edit but the message still
> appers.
>
> Can anybody help me to remove this Ghost DCs from the Active Directory?
>


.

Relevant Pages

  • Re: SBS 2000 install problems (need to reinstall from scratch)
    ... I am NOT wanting to keep all of Active Directory. ... corrupt the new install. ... have any problem with recreating the user accounts at this point. ... >> I am familiar with the Active Directory replication from one server to ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: No DC in Active Directory
    ... I still show no computers or DCs in AD Computers and Users on Srvr1 and they ... The primary DC points to itself as the DNS. ... The second server ... the first server now shows no DCs in the Active Directory ...
    (microsoft.public.windows.server.active_directory)
  • SBS Setup Error: An error occurred while creating user accounts...
    ... At the end of the SBS Setup, I get the error: ... creating user accounts. ... create a test user to verify that Active Directory is running. ... I'm then prompted to restart the server, but it doesn't think it has finished ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Server - AD users OK - NT Users not OK
    ... Domain A is Active Directory. ... I can't prove it,..but I dont' think it will work unless you have one VPN ... Server in each domain with each handling the users from that domain. ... remove the user accounts from the NT Domain to avoid confusion. ...
    (microsoft.public.windows.server.networking)
  • How to Remove Ghost DC from AD
    ... This worked just fine but now the problem is that in the ACtive Directory ... It seems that it cannot be deleted as the server is registered in the active ... When we try to uncheck that option from the AD Users and Computers, ... Can anybody help me to remove this Ghost DCs from the Active Directory? ...
    (microsoft.public.win2000.active_directory)
Loading