"Domain Control" non-normal degraded fallback domain for additional domains

Recently encountered a domain control problem, the domain control server has been running all right, suddenly one day to add a new user, the prompt "directory service has run out of relative identity pool", thought is a small problem, after clicking on the ad when the "name information cannot be found, because: The specified domain does not exist, or cannot contact." Contact your system administrator to verify that your domain is configured correctly and is online. "After restarting the server again can be used, but after a period of time is the same problem ...

It was later learned that there was an additional domain server, because the server problem was eliminated. Finally, according to the problem to find some information, it is because the additional domain does not have a normal demotion fallback domain. This article will briefly describe DC offload and manually clean up DC information that does not already exist on other normally functioning DCS, preventing late domain control problems.

DC Uninstall can be uninstalled using normal conditions, enter Dcpromo , enter the local administrator password, and on the Configure uninstall page you can see that you are removing domain control, operation master, and replication partnerships. After rebooting, the DC is removed .

DC Uninstall can also use the force uninstall, will not be copied DC detach from the domain environment and use Dcpromo/forceremoval forced uninstallation,

The following dialog box pops up;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/5A/01/wKioL1TzzWChc8O-AAGIolF_BI8775.jpg "style=" float: none; "title=" 1.jpg "alt=" Wkiol1tzzwchc8o-aagiolf_bi8775.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/5A/01/wKioL1TzzWvRwQJgAAIHMmUK4pw325.jpg "style=" float: none; "title=" 2.jpg "alt=" Wkiol1tzzwvrwqjgaaihmmuk4pw325.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/5A/04/wKiom1TzzF-gZuE2AAF3DIWpv1Y187.jpg "style=" float: none; "title=" 3.jpg "alt=" Wkiom1tzzf-gzue2aaf3diwpv1y187.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/5A/01/wKioL1TzzXTz0pZiAAGDpZ2bSQo136.jpg "style=" float: none; "title=" 4.jpg "alt=" Wkiol1tzzxtz0pziaagdpz2bsqo136.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/5A/01/wKioL1TzzXjgTJ2JAAGDYB3g5FQ813.jpg "style=" float: none; "title=" 5.jpg "alt=" Wkiol1tzzxjgtj2jaagdyb3g5fq813.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/5A/04/wKiom1TzzGrC-NACAAEPCCZjn_s744.jpg "style=" float: none; "title=" 6.jpg "alt=" Wkiom1tzzgrc-nacaaepcczjn_s744.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/5A/01/wKioL1TzzX_zIax_AAD891JGmpY575.jpg "style=" float: none; "title=" 7.jpg "alt=" Wkiol1tzzx_ziax_aad891jgmpy575.jpg "/>

If you delete AD other in the domain DC (Non- PDC ), the Force Uninstall wizard pops up directly;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/5A/01/wKioL1TzzdqhUt_zAAFXy9NAxUc076.jpg "style=" float: none; "title=" 8.jpg "alt=" Wkiol1tzzdqhut_zaafxy9naxuc076.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/5A/04/wKiom1TzzM3DxJMRAADmXVWieYk679.jpg "style=" float: none; "title=" 9.jpg "alt=" Wkiom1tzzm3dxjmraadmxvwieyk679.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/5A/01/wKioL1TzzeOBr2MSAAD59HiwZxc996.jpg "style=" float: none; "title=" 10.jpg "alt=" Wkiol1tzzeobr2msaad59hiwzxc996.jpg "/>

then proceed AD configuration, starting uninstall DC

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/5A/04/wKiom1TzzSDAOfVdAACcCBw-nh4117.jpg "title=" 11.jpg "alt=" Wkiom1tzzsdaofvdaacccbw-nh4117.jpg "/>

Click Finish to complete the uninstallation.

due to forced uninstallation, other domains within the domainDCdo not know thisDCdoes not exist, it needs to be manually cleaned up on its replication partner, and then the cleanedADcopying information to otherDCon. Inform otherDCthisDCno longer exists. At the command line prompt, enterntdsutil, entermetadata Cleanup;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/5A/01/wKioL1Tzzlexu1eFAAIxUyK22_Y806.jpg "title=" 12.jpg "alt=" Wkiol1tzzlexu1efaaixuyk22_y806.jpg "/>650) this.width=650; src=" http://s3.51cto.com/wyfs02/M02/5A/04/ Wkiom1tzzxzy5u-2aahbn6mifja839.jpg "title=" 13.jpg "alt=" Wkiom1tzzxzy5u-2aahbn6mifja839.jpg "/>

Connect to for manual removal AD of this data DC on (current host)

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/5A/04/wKiom1Tzzffzf4BkAAHNvhA34Z4094.jpg "style=" float: none; "title=" 14.jpg "alt=" Wkiom1tzzffzf4bkaahnvha34z4094.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/5A/01/wKioL1Tzzw2iSpiaAADuUjW4UBU992.jpg "style=" float: none; "title=" 15.jpg "alt=" Wkiol1tzzw2ispiaaaduujw4ubu992.jpg "/>

Select operation Target the command is as follows

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/5A/01/wKioL1TzzxagKnliAAJqfkmd-po986.jpg "title=" 16.jpg "Style=" Float:none; "alt=" wkiol1tzzxagknliaajqfkmd-po986.jpg "/>

Select " List Sites " , " Select the sites listed "

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/5A/04/wKiom1TzzgmimrRwAAFQuvjIXyQ436.jpg "title=" 17.jpg "Style=" Float:none; "alt=" wkiom1tzzgmimrrwaafquvjixyq436.jpg "/>

" list domains in a site " , " Select the fields listed "

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/5A/01/wKioL1Tzzx7wMdOSAAEy0tygHJI348.jpg "title=" 18.jpg "Style=" Float:none; "alt=" wkiol1tzzx7wmdosaaey0tyghji348.jpg "/>

" List sites under AD server name under Domain " , " Select Server " ;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/5A/01/wKioL1TzzyTDG4gFAAInEdEmuLA761.jpg "title=" 19.jpg "Style=" Float:none; "alt=" wkiol1tzzytdg4gfaainedemula761.jpg "/>

that is, repeated use "List" "Select" list the sites, select the site, list the domains under the site, select the domain, list the servers under the site under the domain, select the server, and then complete the manually cleaned DC the choice;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/5A/05/wKiom1TzzheDovSXAAE0vGxHR5U565.jpg "title=" 20.jpg "Style=" Float:none; "alt=" wkiom1tzzhedovsxaae0vgxhr5u565.jpg "/>

Remove the selected server;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/5A/01/wKioL1Tzzy2QnpNXAAD3wgFvPfk218.jpg "title=" 21.jpg "Style=" Float:none; "alt=" wkiol1tzzy2qnpnxaad3wgfvpfk218.jpg "/>

, manually removing the forced uninstallation from the operating host . DC ,

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/5A/01/wKioL1TzzzOjqXMGAAHTGdJahgk421.jpg "title=" 22.jpg "Style=" Float:none; "alt=" wkiol1tzzzojqxmgaahtgdjahgk421.jpg "/>

then open the AD Users and Computers "Domain controllers , select the server that has been deleted on the right win2003-2 Right-click Delete,;

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/5A/05/wKiom1Tzzijwpgp2AAGGV8O8A8o659.jpg "title=" 23.jpg "Style=" Float:none; "alt=" wkiom1tzzijwpgp2aaggv8o8a8o659.jpg "/>

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M00/5A/05/wKiom1TzzivxSyTAAAEkP2n2Ho8976.jpg "title=" 24.jpg "Style=" Float:none; "alt=" wkiom1tzzivxsytaaaekp2n2ho8976.jpg "/>

to delete win2003-2 To describe the reasons for this, and complete the dcwin2003-2 the deletion;

Then, manually deleteDNSZhongyuanDCof theSRVRecord, WakaharaDCto operate the master server, use capture to transfer the operation master to anotherDC, WakaharaDCfor the Global catalog server, select otherDCas a global catalog server, this server will beADCopy to otherDCon.

only when DC When you cannot perform a regular uninstallation, you can consider using forced uninstallation, and you must pay attention to subsequent pairs when you use forced uninstallation AD manual cleanup.

If the normal use of the f8 Enter directory Services Restore mode and modify the registry to dc forcibly becomes a standalone server and navigates to the hkey_local_machine\system\currentcontrolset\ Control\productoptions\producttype

650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M01/5A/01/wKioL1Tzz0KCOtTuAAFzJcOR-zw982.jpg "title=" 25.jpg "Style=" Float:none; "alt=" wkiol1tzz0kcottuaafzjcor-zw982.jpg "/>

will beProductTypechange the key value toservernt, set this server toADunrelated servers, and then manually remove theC:\Windows\NTDS, after rebooting, promote this server toBDC, add to the previous domain, and then demote the deleteADDomain! (because there are many services in this system as well as registry key values andAD, the its first must be upgraded in a downgrade to completely eliminate the risk and avoid futureADerror)

This article is from the "Itlang_jansion_goktech" blog, make sure to keep this source http://wangdy.blog.51cto.com/3845563/1616399

"Domain Control" non-normal degraded fallback domain for additional domains