customernsa.blogg.se

Once you are done with that, the metadata cleanup prompt will appear like this: At the Ntdsutil: prompt, type metadata cleanup.You will see the following prompt displayed in the command prompt window: In the command line, type ntdsutil and press enter.The following steps describe how to cleanup the metadata. This hinders other processes and complete cleanup is required. Incomplete addition or removal of a domain controller can lead to inconsistency in data due to the presence of a domain controller that exists, but is not completely functional.

How to remove a domain controller that no longer exists? The Domain DNS zone needs to be removed first.Account Management » Active Directory How-To pages Note the number & DN of the Domain DNS zone for the orphan domain (in this instance it is #6).Log onto the Domain Naming Master for the forest.Here’s the correct process to clean-up an orphan domain on a 2008 R2 Domain Controller: Import-Module activedirectory (Get-ADRootDSE).namingContexts This process is documented in KB 230306 ( How to remove orphaned domains from Active Directory) however, this doesn’t work on a 2008 R2 DC.Ĭonfirm the domain is still listed in the forest by listing the Naming Contexts using Powershell: Microsoft provided information on how to “metadata cleanup” the dead “RedShirt” domain, though the process was not performed 100% properly (always connect to the Domain Naming Master for this process). However, with both DCs tombstoned, one can’t just DCPromo down a domain DC and select “last DC in the domain”.

Since the domain hasn’t been used in a while, it was decided to clean up the domain (remove it). Yes, I know, how does that happen? ALWAYS monitor your environment.

The 2 Domain Controllers in the domain, “RedShirt” both tombstoned. One of my customers has a forest with several domains, one of which hasn’t been used in a while (call it domain “RedShirt”). Removing an Orphan (inactive) Active Directory Domain