DC Tobstone Lifetime over 60

-

hi all,

i hope can me here.

we have forest multiply domains. each domian(for each country) has 3 dc's.
country(domain) ru seems have domain sync issue.
 the dc's except 3 .ru dc's have event id error: 1864 tobstone lifeime on 60...

the dc1.ru has event id's 1925 , 2042
dc's dc2.ru , dc3.ru have no error entries in event log. sync goes dc2.ru dc3.ru , back. , dc3.ru sync goes dc1.ru. dc1.ru sync goes other dc's in other domains in forest.

by running dcdiag , repadmin see no errors on dc3.ru , dc2.ru. if start dcdiag , repadmin on dc1.ru see dc2.ru , dc3.ru last sync 2012.02.29. same results on other dc's in forest.

but if try create user object no matter on dc, dc1.ru, dc2.ru or dc3.ru user syncing each of them without problems. i'm now.

hope here pro's or allready has same issue can me solve it.

we on server 2008 sp2

i have agree, , mentioned myself , others, dc2.ru , dc3.ru must force demoted, metadata cleanup, re-promoted. easiest course of action.

you can try repair , reinitialize it, due number of dcs in infrastructure, wil become lengthy procedure, it's easier force demote it.

in addition other cleanup blogs , links earlier posted, here's comprehensive step step after forcedemote them. , them 1 @ time, repromote first 1 after cleaning ad adn waiting replication happen (i hope replication links set 15 min , not default 180 min), next one.

complete step step guideline remove orphaned domain controller (including seizing fsmos, running metadata cleanup, cleanup dns (nameserver tab), ad sites (old dc references), transfer or fix time settings, wins settings, etc.
published ace fekay, mct, mvp ds on oct 5, 2010 @ 12:14
http://msmvps.com/blogs/acefekay/archive/2010/10/05/complete-step-by-step-to-remove-an-orphaned-domain-controller.aspx

.

.

if unsure or not trusting our recommendations, have option call microsoft support. one small fee, take whatever time required fix you. , i'm sure need fixed asap instead of further discussing in forums.

here's list of phone numbers if choose option:
http://support.microsoft.com/default.aspx?scid=fh;en-us;phonenumbers 

.

ace fekay
mvp, mct, mcitp/ea, mcts windows 2008/r2 & exchange 2007, exchange 2010 ea, mcse & mcsa 2003/2000, mcsa messaging 2003
microsoft certified trainer
microsoft mvp - directory services
technical blogs & videos: http://www.delawarecountycomputerconsulting.com/

this post provided as-is no warranties or guarantees , confers no rights.

facebook twitter linkedin



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Motherboard replacement

-
running windows 10 technical preview, need replace motherboard can run the  sysprep  command restoring pc ? or there easier  or more preferred way ? thanks if replace motherboard within same family of chipsets (i.e. intel > intel or amd > amd), should okay restarting pc twice. carey frisch Windows 10 Insider Preview  >  Windows 10 Insider Preview General
Read more

Cannot create Full Text Search catalog after upgrading to V12 - Database is not fully started up or it is not in an ONLINE state

-
in order access new full text search capiblities of sql azure, upgraded our azure sql v12. (a day later), when try create new catalog: create fulltext catalog mycatalog default i following message: msg 9972, level 16, state 100, line 1 database not started or not in online state. try full-text ddl command again after database started , becomes online. hi scott, apologies inconvenience caused you. known issue on service side , fix going included in next update. specific case mitigated, should able use full-text search syntax now. thanks, mihaela Microsoft Azure  >  Azure SQL Database
Read more

Remote Desktop App - Error 0x207 or 0x607

-
hi all, i manage windows 2012 r2 network, including connection broker, session hosts , remote apps virtual servers.  i've used remote desktop app on own android phone, no issues @ - connects published gateway url , can login , access network. we looking move business onto nokia handsets ms operating system (currently on blackberry), not able connect via remote desktop app on nokia lumia handset. setup, per android config , brings remote apps , remote desktop screen, know can connect.  when select remote desktop, shows following process: initiating remote connection securing remote connection certificate can't verified - choose connect it digitally signed cert (digicert sha2), pc name different physical connection broker name (inherited domain name old gov project - can't publish publicly) initiating establishing securing connection error have been 0x207 getting 0x607 a bit baffled, work on android (and ipad @ home using app). assume ms use d...
Read more