Reboot during demote W2k DC after long time offline

Home Forums Server Operating Systems Windows Server 2000 / 2003 / 2003 R2 Reboot during demote W2k DC after long time offline

This topic contains 9 replies, has 6 voices, and was last updated by  Anonymous 8 years, 8 months ago.

Viewing 10 posts - 1 through 10 (of 10 total)
  • Author
    Posts

  • huyenthu
    Member
    #148330

    I have 1 W2k SP4 DC offline long time. However, it has important app so I must connect it to domain again.
    I want to demote this DC because this server hardware too old and it is unstable
    however I met some troubles:

    1. Firstly, I couln’t run dcpromote because this server couln’t contact with other DC
    I found in some website that this problem due to my DC long time offline.
    I need reset this DC account password. I did and this action was success.
    This server can contact with other DCs and repliation progress can be done.

    2. I can run the dcpromote, however after a few minutes, the server reboot and it showed 2 box messages:

    – The operation failed with the following error: The remote procedure call failed.

    and

    – This system is shutting down. ….
    The system process ‘C:WINNTsystem32Lsass.exe’ terminated unexpectedly with status code -1073741819. The system will now shutdown and restart.

    I tried dcpromote /forceremoval, it also met the same trouble.

    Anyone please help me how to demote this DC become a normal PC in our domain?


    Anonymous
    #372278

    Re: Reboot during demote W2k DC after long time offline

    Run a av scan asap on that server, i think you may have the lsass virus

    http://www.symantec.com/security_response/writeup.jsp?docid=2004-050114-1706-99

    once youve done that, then go into AD sites and services on your working dc`s, remove all references to the retired DC.

    Then do the /forceremoval.


    Anonymous
    #372303

    Re: Reboot during demote W2k DC after long time offline

    Thks,

    Now I’m checking and removing virus if it has.

    However, please tell me more what does “remove all references to the retired DC” means?


    Ossian
    Moderator
    #180853

    Re: Reboot during demote W2k DC after long time offline

    Seek and ye shall find:
    http://www.petri.com/delete_failed_dcs_from_ad.htm


    Anonymous
    #372279

    Re: Reboot during demote W2k DC after long time offline

    Well, as the DC has been turned off fo so long it will be tombstoned, meaning it cannot function within AD – connect etc. So in AD sites and services, find all references to this server, right click and delete.

    then do the foreremoval on the retired server


    Anonymous
    #372304

    Re: Reboot during demote W2k DC after long time offline

    I checked virus in this server already. It seems no virus because:

    1. Before the time I disconnected this server from NW never reboot automatically like this
    and after I connect to NW, except for the times I use dcpromote, it also never reboot.
    – My DC installed Symantec Antivirus v10 and virus definition is updated.
    – OS service patch updated
    – I run Sasser tool, full scan DC in safe mode, it also didn’t find any virus.
    – None of Sasser virus phenomenon were found.

    2. Remote procedure call failed and reboot message only appear when I run dcpromo with the process is: Create a local user for SAM database

    I try forceremoval once again, the problem still happend

    I want to know if the process of demote like above, can the AD function work normal?

    And if I manual remove DC, can I plug this DC in NW continue? Because I must let this server online after demote.


    biggles77
    Spectator
    #211068

    Re: Reboot during demote W2k DC after long time offline

    Try this. http://forums.petri.com/showthread.php?t=34887&highlight=tombstoned

    As mentioned in the above post, do not forget to reset the Tombstone back to FALSE ( dword:00000000 ) to close the security gap.


    macking
    Member
    #295188

    Re: Reboot during demote W2k DC after long time offline

    It sounds like the server has been out of the domain for too long and has been tombstoned. I’d suggest going into AD and removing the computer/server in any instances it is found.

    Let me know if that works, or post additional information you may have.

    ______________________________________________
    Tim Macking
    MCSE 2003, MCDBA, MCSA, MCTS, MCP, MCT, MCITP
    Project Manager / IT Consultant
    Zander Technical Conultants Ltd
    St. Petersburg, Florida
    “Working the magic 30% of the time”


    biggles77
    Spectator
    #211080

    Re: Reboot during demote W2k DC after long time offline

    biggles77;200237 wrote:
    Try this. http://forums.petri.com/showthread.php?t=34887&highlight=tombstoned

    As mentioned in the above post, do not forget to reset the Tombstone back to FALSE ( dword:00000000 ) to close the security gap.

    macking, read the link at the quoted link. It shows you how to “UNtombstone” a DC.


    Anonymous
    #372305

    Re: Reboot during demote W2k DC after long time offline

    Thanks for your solutions,

    However, I tried to dcpromo /forceremove already. It failed (automatic reboot) when “creating a local account of SAM for database”.

    I don’t know after I do like that, can I untomstone it?

    I afraid AD function have problem because in AD Users & computers snap-in there was nothing in Builtin, Computers, Domain Controllers.

Viewing 10 posts - 1 through 10 (of 10 total)

You must be logged in to reply to this topic.