Deleted a Domain Controller, now what?

Hello Everyone,

I inadvertantly deleted the WRONG domain controller out of Active Directory
the other day. Does anyone have advice on the proper way to get promote this
server to a Domain Controller again? Can I demote/promote or will it bomb
out when attempt either action?

Thanks in advance for any advice... stupid move here that might end up being
a LOT of work...

Thanks,
Sean

Meinolf
Fri May 02 13:16:20 PDT 2008

Hello seanka79,

Have a look here about deleted DC:
http://support.microsoft.com/kb/298450

Even it states for 2000, you can use the way for 2003 i think:
http://support.microsoft.com/kb/257288/EN-US/

But i personally would remove the deleted DC from AD with this and then start
from scratch:
http://support.microsoft.com/kb/555846/en-us

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hello Everyone,
>
> I inadvertantly deleted the WRONG domain controller out of Active
> Directory the other day. Does anyone have advice on the proper way to
> get promote this server to a Domain Controller again? Can I
> demote/promote or will it bomb out when attempt either action?
>
> Thanks in advance for any advice... stupid move here that might end up
> being a LOT of work...
>
> Thanks,
> Sea

google
Fri May 02 23:40:32 PDT 2008

Hi,
I would say that it might be more complex than it seems.
First you have to assess the damage which means answering the
following questions:
1.Do you have another DC left?
2.Do you have another GC left?
3.Did the deleted DC hold any FSMO roles and did you seize the roles
after the deletion?

Regards,

Dean
http://www.netometer.com

Paul
Fri May 02 12:55:59 PDT 2008

You could do an authoritative restore on the server object, but I haven't
done this before and not sure which objects to replace. So my guess would
be to demote the server

dcpromo /forceremoval


and then do a metadata cleanup
http://technet2.microsoft.com/WindowsServer/en/library/c694f7f1-e05a-474c-b02b-19a7575ed8601033.mspx?mfr=true


Finally repromote

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"seanka79" <seanka79@discussions.microsoft.com> wrote in message
news:96A555C8-913D-46BF-9136-160689EB087B@microsoft.com...
> Hello Everyone,
>
> I inadvertantly deleted the WRONG domain controller out of Active
> Directory
> the other day. Does anyone have advice on the proper way to get promote
> this
> server to a Domain Controller again? Can I demote/promote or will it bomb
> out when attempt either action?
>
> Thanks in advance for any advice... stupid move here that might end up
> being
> a LOT of work...
>
> Thanks,
> Sean

Jorge
Sun May 18 14:20:31 PDT 2008

what did you delete? (as in what object?) computer account? NTDS Settings
object?

what's the OS?


otherwise DEMOTE the DC using a forced demotion (DCPROMO /FORCEREMOVAL) and
then perform a metadata cleanup of that same DC
(allow replication to take place for the changes, the cleanup, you made)
after that re-promote the DC again.

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"seanka79" <seanka79@discussions.microsoft.com> wrote in message
news:96A555C8-913D-46BF-9136-160689EB087B@microsoft.com...
> Hello Everyone,
>
> I inadvertantly deleted the WRONG domain controller out of Active
> Directory
> the other day. Does anyone have advice on the proper way to get promote
> this
> server to a Domain Controller again? Can I demote/promote or will it bomb
> out when attempt either action?
>
> Thanks in advance for any advice... stupid move here that might end up
> being
> a LOT of work...
>
> Thanks,
> Sean