Help - Search - Members - Calendar
Full Version: Ghost Domain Controller in AD
Neowin Forums > Windows Support > Windows NT4/2000/2003/2008 Server
Eversurf
I have a Domain Controller in my Active Directory that doesn't exist. If I look in the Domain Controller container it shows up in there. Obviously it hasn't been remove properly (I don't know the reason) I need to remove it because I believe it is causing errors in my event log.

Has anyone ever done this or can someome point me to some documentation.

Thank you
Eversurf
I just checked with NTDSutil and the server is not listed in my site but it shows up in the Domain Controller OU....

Scratching my head
Draaku
2 second google search...this should do it for you. I've done this once a looong time ago.

Windows 2000 tracks each domain controller (DC) in the metadata. If you remove a DC (e.g., through reinstallation or hardware removal) and you don’t run DCPROMO to clean up the DC’s metadata, connection objects will remain.

You can use the utility NTDSUTIL to remove a server from the metadata. (In the following code, enter the commands in bold.)

D:\>ntdsutil
ntdsutil: metadata cleanup
metadata cleanup: select operation target

Next, you must connect to a server. In my example, I select a domain to accomplish this task. (In the following code, enter the commands in bold.)

select operation target: connections
server connections: connect to domain savilltech.com
Binding to \\TITANIC.savilltech.com ...
Connected to \\TITANIC.savilltech.com using credentials of locally logged on user
server connections: quit

Next, you must select a site, a server (i.e., the server you want to delete), and the domain the server is in. The order isn’t important. (In the following code, enter the commands in bold.)

select operation target: list sites
Found 2 site(s)
0 - CN=London,CN=Sites,CN=Configuration,DC=savilltech,DC=com
1 - CN=Kent,CN=Sites,CN=Configuration,DC=savilltech,DC=com
select operation target: select site 0
Site - CN=London,CN=Sites,CN=Configuration,DC=savilltech,DC=com
No current domain
No current server
No current Naming Context
select operation target: list servers in site
Found 4 server(s)
0 - CN=TITANIC,CN=Servers,CN=London,CN=Sites,CN=Configuration,DC=savilltech,DC=com
1 - CN=TITUS,CN=Servers,CN=London,CN=Sites,CN=Configuration,DC=savilltech,DC=com
2 - CN=MORPHEUS,CN=Servers,CN=London,CN=Sites,CN=Configuration,DC=savilltech,DC=com
3 - CN=TRINITY,CN=Servers,CN=London,CN=Sites,CN=Configuration,DC=savilltech,DC=com
select operation target: select server 2
Site - CN=London,CN=Sites,CN=Configuration,DC=savilltech,DC=com
No current domain
Server - CN=MORPHEUS,CN=Servers,CN=London,CN=Sites,CN=Configuration,DC=savilltech,DC=com
DSA object - CN=NTDS Settings,CN=MORPHEUS,CN=Servers,CN=London,CN=Sites,CN=Configuration,DC=savilltech,DC=com
DNS host name - MORPHEUS.deleteme.savilltech.com
Computer object - CN=MORPHEUS,OU=Domain Controllers,DC=deleteme,DC=savilltech,DC=com
No current Naming Context
select operation target: list domains
Found 3 domain(s)
0 - DC=savilltech,DC=com
1 - DC=dev,DC=savilltech,DC=com
2 - DC=deleteme,DC=savilltech,DC=com
select operation target: select domain 0
Site - CN=London,CN=Sites,CN=Configuration,DC=savilltech,DC=com
Domain - DC=savilltech,DC=com
Server - CN=MORPHEUS,CN=Servers,CN=London,CN=Sites,CN=Configuration,DC=savilltech,DC=com
DSA object - CN=NTDS Settings,CN=MORPHEUS,CN=Servers,CN=London,CN=Sites,CN=Configuration,DC=savilltech,DC=com
DNS host name - MORPHEUS.deleteme.savilltech.com
Computer object - CN=MORPHEUS,OU=Domain Controllers,DC=deleteme,DC=savilltech,DC=com
No current Naming Context
select operation target: quit

Next, remove the server you selected. (In the following code, enter the command in bold.)

metadata cleanup: remove selected server

In the confirmation dialog box, which the Screen shows, click Yes.

user posted image

Close the utility. (In the following code, enter the commands in bold.)

"CN=MORPHEUS,CN=Servers,CN=London,CN=Sites,CN=Configuration,DC=savilltech,DC=com
" removed from server "\\TITANIC.savilltech.com"
metadata cleanup: quit
ntdsutil: quit
Disconnecting from \\TITANIC.savilltech.com ...

Finally, you need to delete the server from the Microsoft Management Console (MMC) Active Directory Sites and Servers snap-in. Select Programs, Administrative Tools, Active Directory Sites and Services from the Start menu. Expand the Sites branch, select the site, expand the Services container, right-click the server, and select Delete. Click Yes in the confirmation dialog box. I have been informed of a possible problem with this is SP2 is installed in which case perform on a box without SP2 installed.
Eversurf
Yeah I have done that and the server didn't show up in the metadata thingy. So i guess it's been remove from it. It still showing up in the Domain Controller OU.

I will check in my site replication to see if it's in there.

thank you
Eversurf
nope not in the Site Snap in either. Just in the Domain Controller OU

Can I safely remove it?

BTW I have a good backup of my AD
Eversurf
Alright I have deleted it and it was pretty cool because it asked me the reason why I wanted to delete that object. I choose because the DC wasn't online anymore and could not be remove using dcpromo. Time will tell if the error problems have been resolved


Thank for the help and have fun !!!
Draaku
you're welcome, hope things work out.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.