How to remove a domain controller that no longer exists?

Steven · 2021-04-02 21:56 · 70 views · Windows · old id 68

dccontroller: abc.mstc.com    not exist;

logon other dccontroller:  ctu.mstc.com   run below command：

 

C:/>ntdsutil

ntdsutil: metadata cleanup             - 清理不使用的服务器的对象

metadata cleanup: select operation target   - 选择的站点，服务器，域，角色和命名上下文

select operation target: connections       - 连接到一个特定域控制器

server connections: connect to server ctu.mstc.com    --绑定到 ctu.

用本登录的用户的凭证连接 ctu。

server connections: quit - 返回上一层目录

select operation target: list site - 在企业中列出站点(找到1个站点，标识为0)

找到 1 站点

0 - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mstc,DC=com

select operation target: select site 0 - 将标识为 0 的站点定为所选站点

站点 - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=mstc,DC=com

没有当前域

没有当前服务器

当前的命名上下文

select operation target: list domains - 列出所有包含交叉引用的域

找到 1 域

0 - DC= mstc,DC=com

select operation target: select domain 0 - 将标识为 0 的域定为所选域

站点 - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC= mstc,DC=com

域 - DC= mstc,DC=com

没有当前服务器

当前的命名上下文

select operation target: list servers in site - 列出所选域和站点中的服务器(找到两个：0-abc.mstc.com；1-ctu. mstc.com)

找到 2 服务器

0-CN=ADDEMO,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC= mstc,DC=com

1-CN=ADDDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC= mstc,DC=com

2-        

select operation target: select server 0 - 将标识为 0 的服务器（abc）定为所选服务器——也就是要删除的DC


站点 - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=acme,DC=com

域 - DC= mstc,DC=com

服务器 - CN=ADDEMO,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC= mstc,DC=com

DSA 对象 - CN=NTDS Settings,CN=ADDEMO,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configur

DNS 主机名称 - abc.mstc.com

计算机对象 - CN=ABC,OU=Domain Controllers,DC=mstc,DC=com

当前的命名上下文

 

 

select operation target: quit - 返回上一层目录

metadata cleanup: remove select server - 从所选服务器上删除 DS 对象

在弹出的对话提示框上选择“是”，

“CN=abc,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC= mstc,DC=com”删除了，从服务器“ctu”

现在，abc.mstc.com这个Dc对象就在你的AD里消失了.




===================================================================

SERVER200 was offline, remove SERVER200 on SERVER100

DC Controllers are SERVER100 and SERVER200


Incomplete addition or removal of a domain controller can lead to inconsistency in data due to the presence of a domain controller that exists,

but is not completely functional. This hinders other processes and complete cleanup is required. The following steps describe how to cleanup the metadata.

  1. logon SERVER100, In the command line, type ntdsutil and press enter.
    C:\WINDOWS→ntdsutil
    You will see the following prompt displayed in the command prompt window:
    ntdsutil:
  2. At the Ntdsutil: prompt, type metadata cleanup
    ntdsutil: metadata cleanup
    Once you are done with that, the metadata cleanup prompt will appear like this:
    metadata cleanup:
  3. At the metadata cleanup: prompt, type connections and press Enter.

    metadata cleanup: connections
    Now the server connections mode is on, as mentioned below:
    server connections:
  4. In server connections:, type :
    connect to server SERVER100

    Here SERVER100 is the domain controller (any functional domain controller in the same domain) from which you plan to clean up the metadata of the failed domain controller. Press Enter after entering your server name. In this case, consider the server name to be server100. You will see the following entry.
    server connections: connect to server SERVER100
    Binding to server100 ...
    Connected to server100 using credentials of locally logged on user.

  5. Type q in server connections to quit and press Enter to return to the metadata cleanup prompt.
    server connections: q
    metadata cleanup:
  6. In metadata cleanup, type select operation target and press Enter.
    metadata cleanup: Select operation target
    Now select operation target mode will come up.
    select operation target:
  7. Type list domains and press Enter.
    select operation target: list domains
    This lists all domains in the forest with a number associated with each.
    Found 1 domain(s)
    0 - DC=dorg,DC=net
  8. Type select domain <number→, where <number→ corresponds to the domain in which the failed server was located. Press Enter.
    select operation target: Select domain 0
    We specify the number as 0 here, as the previous prompt let us know that 0 is the number assigned to the domain "dorg.net". Next you will see:
    No current site
    Domain - DC=dorg,DC=net
    No current server
    No current Naming Context
  9. Type list sites and press Enter.
    select operation target: List sites
    The sites belonging to this domain are then listed as below:
    Found 1 site(s)
    0-CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dorg,DC=net
  10. Type select site <number→, where <number→ refers to the number of the site in which the domain controller was a member. Press Enter.
    select operation target: Select site 0
    We specify the number as 0 here, as the previous prompt let us know that 0 is the number assigned to the site available. Next you will see:
    Site-CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dorg,zC=net
    Domain - DC=dorg,DC=net
    No current server
    No current Naming Context
  11. Type list servers in site and press Enter.
    select operation target: List servers in site
    This will list all servers in that site with a corresponding number.
    Found 2 server(s)
    0-CN=SERVER200,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dorg,DC=net
    1-CN=SERVER100,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dorg,DC=net
  12. Type select server <number→ and press Enter, where <number→ refers to the domain controller to be removed.
    select operation target: Select server 0
    The number is 0 since we want to take out server200. You will be able to view:

    Site-CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dorg,DC=net Domain - DC=dorg,DC=net
    Server-CN=SERVER200,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dorg,DC=net
    DSA-object-CN=NTDSSettings,CN=SERVER200,CN=Servers, CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dorg, DC=net DNS host name - server200.dorg.net
    Computer object-CN=SERVER200,OU= Domain Controllers,DC=dorg,DC=net
  13. Type q to quit and press Enter. The Metadata cleanup menu is displayed.
    select operation target: q
    metadata cleanup:
  14. Type "remove selected server" and press Enter. You will receive a warning message. Read it, and if you agree, press Yes.

    metadata cleanup: Remove selected server
    "CN=SERVER200,CN=Servers,CN=Default-First-Site-Name,
    CN=Sites,CN=Configuration,DC=dorg,DC=net" removed from server "server100"

  15. Type quit, and press Enter until you return to the command prompt to remove the failed server object from the sites.
  16. In Active Directory Users and Computers, expand the domain controllers container. Delete the computer object associated with the failed domain controller.
  17. Windows Server 2003 AD might display a new type of question window, asking you if you want to delete the server object without performing a DCPROMO operation . Select “This DC is permanently offline…” and click on the Delete button.
  18. AD will display another confirmation window. If you’re sure that you want to delete the failed object, click Yes to remove the failed server object from DNS.
  19. In the DNS snap-in, expand the zone that is related to the domain from where the server has been removed. Remove the CNAME record in the _msdcs.root domain of forest zone in DNS. You should also delete the HOSTNAME and other DNS records. If you have reverse lookup zones, also remove the server from these zones.


← Back to home

Recent Posts