Need help revovering Primary Domain Controller

[mikkydoos]

Hi,

 

Was running DirSync to sync my AD with Microsoft cloud.

 

The process has wrecked my primary DC. (I do have a secondary DC operating OK although is not FSMO)

 

I have no NETLOGON or SYSVOL shares on the primary DC. I can't browse the network - only using IP addresses although DNS looks fine.

Whenever I try to open any AD console e.g. 'AD Users and Computers' I get the error

 

'Naming information cannot be located because: The directory or file cannot be created. Contact your system admin to verify that your domain is properly configured and online'

 

 

DcDiag gives me ...(file attached) dcdiag output.txt

 

 

Properly stumped.... any help out there please !!!!

 

Thinking of promoting the second DC to FSMO, reinstalling the primary then promote primary back to FSMO.

 

Machine is a VM and I don't have a recent enough snapshot to avoid re-doing a lot of work

 

 

Properly stumped.... any help out there please !!!!

 

 

Cheers in advance

Edited March 11, 2014 by mikkydoos

[djm968]

Do you have a recent backup of the failed DC? Recovery from a backup would be would be my first option.

 

You could promote your second DC but you will probably need to force demote the primary DC.

 

Windows 2003

https://support.microsoft.com/kb/332199

 

Windows 2008

Forcing the Removal of a Domain Controller

 

Using Ntdsutil.exe to transfer or seize FSMO roles to a domain controller

Using Ntdsutil.exe to transfer or seize FSMO roles to a domain controller

Edited March 11, 2014 by djm968

[fiza]

Take the FSMO roles and demote the server.

[Mr.Ben]

Agreed. If it's broken, don't fix it - transfer the FSMO roles if you can (otherwise you will have to 'sieze' them) and build a new dc on the old hardware (with a different NetBIOS name).

[mikkydoos]

Thats what I'm thinking.

 

I do have a backup snapshot. When I restore that it works for 2 mins then I start getting the same errors.

 

BTW OS is Server 2012

[mikkydoos]

Another quickie guys.....

 

If I move the Global Catalog/FSMO roles to DC-02 will it then be the schema master for the forest/domain?

Will DC-01 then effectively be the secondary controller that I can then demote, clean the metadata and rebuild?

 

Do I do move the roles before or after demoting my current primary DC ?? I'm presuming before but just checking.

 

 

Cheers guys ; )

[fiza]

If you move all the FSMO roles then your dc-02 will become the schema master (its 1 of the FSMO roles). Move the roles then demote the old server.

[Davit2005]

Was DirSync installed on the DC and is it a 2012 R2 DC

[mikkydoos]

No, it was installed on another non DC server running a test of exchange

[mikkydoos]

Agreed. If it's broken, don't fix it - transfer the FSMO roles if you can (otherwise you will have to 'sieze' them) and build a new dc on the old hardware (with a different NetBIOS name).

 

Mr. Ben. Cheers for your post.

 

If I DO use the same NETBIOS name, whats the implication ?

[Mr.Ben]

There isn't a direct implication if you have removed all of the references to the DC in AD, but I always think its better to be safe and go with an new name and IP address.

 

Then if I miss anything, I won't spend time scratching my head wondering if a reference is to the old of new server.