ricki Posted October 2, 2009 Posted October 2, 2009 Hi Please can someone help me. When I run dcdiag I am getting this as part of the message Starting test: VerifyEnterpriseReferences The following problems were found while verifying various important DN references. Note, that these problems can be reported because of latency in replication. So follow up to resolve the following problems, only if the same problem is reported on all DCs for a given domain or if the problem persists after replication has had reasonable time to replicate changes. [1] Problem: Missing Expected Value Base Object: CN=MAINSERVER,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=BALSHAWSCURRIC,DC=LOCAL Base Object Description: "SYSVOL FRS Member Object" Value Object Attribute Name: frsComputerReference Value Object Description: "DC Account Object" Recommended Action: Check if this server is deleted, and if so clean up this DCs SYSVOL FRS Member Object. Also see Knowledge Base Article: Q312862 [2] Problem: Missing Expected Value Base Object: CN=MAINSERVER,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=BALSHAWSCURRIC,DC=LOCAL Base Object Description: "SYSVOL FRS Member Object" Value Object Attribute Name: serverReference Value Object Description: "DSA Object" Recommended Action: Check if this server is deleted, and if so clean up this DCs SYSVOL FRS Member Object. Also see Knowledge Base Article Q312862 ......................... SERVER2003 failed test VerifyEnterpriseReferences I have found the instructions to clean up the problem on How to remove data in Active Directory after an unsuccessful domain controller demotion and have tried to follow them and get this as the list of servers when I go through the procedure up to select operation target: list servers in site Found 3 server(s) 0 - CN=SERVER2003,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuratio n,DC=BALSHAWSCURRIC,DC=LOCAL 1 - CN=SOPHOS-SERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configura tion,DC=BALSHAWSCURRIC,DC=LOCAL 2 - CN=USERSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuratio n,DC=BALSHAWSCURRIC,DC=LOCAL Now I am stuck the mainserver has never been a domain controller in all the time I have been here. It is now completely dead as the hard drives failed. I have checked users and computers and its not in there and I have checked sites and services and its not in there either. Has anyone got any ideas how I fix this. Thanks for all your help. Richard
ricki Posted October 2, 2009 Author Posted October 2, 2009 Hi I have run the frsdiag tool and I get and the mainserver is listed in here. Richard
cookie_monster Posted October 2, 2009 Posted October 2, 2009 (edited) I think you need to take a look at this link it explains how to remove a failed DC. Delete Failed DCs from Active Directory http://support.microsoft.com/kb/216498 I apologise I see at the bottom that you followed that link. Is the server still listed in sites and services? Edited October 2, 2009 by cookie_monster
ricki Posted October 2, 2009 Author Posted October 2, 2009 Hi Its not in sites and services or users and computers oh what fun. Richard
cookie_monster Posted October 2, 2009 Posted October 2, 2009 (edited) Have you read the suggested KB, looks like it could take a while to digest Recovering missing FRS objects and FRS attributes in Active Directory What does the output of 'ntfrsutl ds' look like? Edited October 2, 2009 by cookie_monster
ricki Posted October 2, 2009 Author Posted October 2, 2009 Hi ntfrsutl ds shows ntfrsutlds.txt This shows the mainserver Richard
cookie_monster Posted October 2, 2009 Posted October 2, 2009 (edited) Example 1 on the Q312862 article shows this "WARN - DC1 lacks a settings reference" which I can see in your logs so I think we're on the right track. Do you see any reference to MAINSERVER if you use ADSIEDIT? Edited October 2, 2009 by cookie_monster
ricki Posted October 5, 2009 Author Posted October 5, 2009 Hi I have tried the adsi.msc and it looks like an extended version of the users and computers I have had a look and cannot see the mainserver but I cannot find a search is there a way to search. Thanks Richard
cookie_monster Posted October 5, 2009 Posted October 5, 2009 (edited) I'm not sure that you can search in adsiedit. Have you tried searching the whole of active directory in ADUC for mainserver? It looks a bit like it was successfully removed from AD but somehow FRS has remembered it. It might be worth following this article through. http://www.booktou.com/node/48/0321305019/ch09lev1sec4.html Edited October 5, 2009 by cookie_monster
ricki Posted October 5, 2009 Author Posted October 5, 2009 Hi Cookie Monster I am sorry I cannot get at the link the site has been blocked by Lancashire. Please could you copy and paste the instructions. Thanks for all your help. Richard
cookie_monster Posted October 5, 2009 Posted October 5, 2009 Odd I could get at it this morning and now it's blocked here as a "Substance Abuse" site, I assure you it's not You might have to unblock it or take a look at home.
ricki Posted October 5, 2009 Author Posted October 5, 2009 Hi Thanks I will ask to see if they can release it now. Richard
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now