Re: Adprep /forestprep error

Please provide more info on why you are running adprep on your domain after
losing a dc.

Run diagnostics against your Active Directory domain.

If you don't have the support tools installed, install them from your server
install disk.
d:\support\tools\setup.exe

Run dcdiag, netdiag and repadmin in verbose mode.
-> DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
-> netdiag.exe /v > c:\netdiag.log (On each dc)
-> repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt
-> dnslint /ad /s "ip address of your dc"

**Note: Using the /E switch in dcdiag will run diagnostics against ALL dc's
in the forest. If you have significant numbers of DC's this test could
generate significant detail and take a long time. You also want to take
into account slow links to dc's will also add to the testing time.

If you download a gui script I wrote it should be simple to set and run
(DCDiag and NetDiag). It also has the option to run individual tests
without having to learn all the switch options. The details will be output
in notepad text files that pop up automagically.

The script is located on my website at
http://www.pbbergs.com/windows/downloads.htm

Just select both dcdiag and netdiag make sure verbose is set. (Leave the
default settings for dcdiag as set when selected)

When complete search for fail, error and warning messages.

Description and download for dnslint
http://support.microsoft.com/kb/321045

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Dan Gray" <dan.gray@xxxxxxxxxxxx> wrote in message
news:BcVwk.26439$Ri.14632@xxxxxxxxxxxxxxxxxxxxxxx
I lost a domain contoller in my AD domain and had to remove it by force
"medadata cleanup". When I run adprep /forestprep I am getting the
following error on the domain controller that was removed.

Adprep encountered an LDAP error.
Error code: 0x20. Server extended error code: 0x208d, Server error
message: 0000
208D: NameErr: DSID-031001BD, problem 2001 (NO_OBJECT), data 0, best match
of:
'CN=DALSRV1\
DEL:1f1b163e-6f03-4bcf-b5ac-5ec5c8e7ca34,CN=Servers,CN=Default-First-Site-Name,C
N=Sites,CN=Configuration,DC=testme,DC=com'

Any thoughts on how to remove this from the AD domain?



.

Relevant Pages

  • Re: Workstations Authenticate to Random DCs
    ... The group "Enterprise Domain Controllers" should be listed but that ... Run diagnostics against your Active Directory domain as well as netdiag on a ... Run dcdiag, netdiag and repadmin in verbose mode. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows 2003 Pre-authentication failed
    ... Run diagnostics against your Active Directory domain. ... Run dcdiag, netdiag and repadmin in verbose mode. ... If I demote the server to just be a member server it is fine. ...
    (microsoft.public.windows.server.security)
  • RE: IMpact of changing the IP address of a Domain Controller
    ... Run diagnostics against your Active Directory domain. ... Run dcdiag, netdiag and repadmin in verbose mode. ... If you download a gui script I wrote it should be simple to set and run (DCDiag and NetDiag). ...
    (microsoft.public.windows.server.active_directory)
  • Re: SYSVOL Doesnt appear as shared in a Secondary Domain Controller
    ... Run diagnostics against your Active Directory domain. ... Run dcdiag, netdiag and repadmin in verbose mode. ... this secondary domain controller and then promote it as domain controller ...
    (microsoft.public.windows.server.active_directory)
  • Re: Global catalog svr not found - dcs not repl via frs
    ... this would help in the diagnosis. ... Run diagnostics against your Active Directory domain. ... Run dcdiag, netdiag and repadmin in verbose mode. ...
    (microsoft.public.windows.server.active_directory)