ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    DC seems to have fallen off the Domain

    Scheduled Pinned Locked Moved IT Discussion
    38 Posts 4 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DashrenderD
      Dashrender @thwr
      last edited by

      @thwr said in DC seems to have fallen off the Domain:

      @Dashrender said in DC seems to have fallen off the Domain:

      If you're DC is just a DC - you can demote it, then leave the domain, wipe and reload it, join the domain and promote.

      If it's also a fileserver, etc, well - have fun.

      This of course assumes you can't use the normal tools to remove the old AV cleanly.

      mkfs.ntfs & format ... The only tools I know to fully remove Symantec products - except for a snapshot maybe.

      LOL

      1 Reply Last reply Reply Quote 0
      • wirestyle22W
        wirestyle22 @NerdyDad
        last edited by

        @NerdyDad Is that secondary domain controller doing anything else like being a file server?

        NerdyDadN 1 Reply Last reply Reply Quote 0
        • NerdyDadN
          NerdyDad @wirestyle22
          last edited by

          @wirestyle22 said in DC seems to have fallen off the Domain:

          @NerdyDad Is that secondary domain controller doing anything else like being a file server?

          It is a secondary controller. FSMO roles are on another DC. The only other thing this server does is ots a print server and DHCP server.

          DashrenderD 1 Reply Last reply Reply Quote 0
          • DashrenderD
            Dashrender @NerdyDad
            last edited by

            @NerdyDad said in DC seems to have fallen off the Domain:

            @wirestyle22 said in DC seems to have fallen off the Domain:

            @NerdyDad Is that secondary domain controller doing anything else like being a file server?

            It is a secondary controller. FSMO roles are on another DC. The only other thing this server does is ots a print server and DHCP server.

            Well, as I said, if you can't remove the old AV using the typical tools, you do have other options, not great ones, but they are there.

            1 Reply Last reply Reply Quote 0
            • NerdyDadN
              NerdyDad
              last edited by

              As I am digging into this more and more, I am finding replication issues between DC's, namely the original problem child.

              <code>
              Source DSA largest delta fails/total %% error

              DOS3 38d.14h:20m:23s 5 / 10 50 (8457) The destination server is currently rejecting replication requests.

              DOS4B 38d.14h:20m:22s 5 / 15 33 (8457) The destination server is currently rejecting replication requests.

              SMC4A 38d.14h:20m:23s 5 / 15 33 (8457) The destination server is currently rejecting replication requests.

              SMC4B 35d.14h:24m:28s 15 / 15 100 (8456) The source server is currently rejecting replication requests.

              Destination DSA largest delta fails/total %% error

              DOS3 35d.14h:16m:35s 5 / 15 33 (8456) The source server is currently rejecting replication requests.

              DOS4B 35d.14h:02m:35s 5 / 15 33 (8456) The source server is currently rejecting replication requests.

              SMC4A 35d.14h:22m:52s 5 / 10 50 (8456) The source server is currently rejecting replication requests.

              SMC4B 38d.14h:20m:24s 15 / 15 100 (8457) The destination server is currently rejecting replication requests.
              </code>

              1 Reply Last reply Reply Quote 0
              • wirestyle22W
                wirestyle22
                last edited by

                repadmin /sync on all domain controllers. What does that return?

                NerdyDadN 1 Reply Last reply Reply Quote 0
                • NerdyDadN
                  NerdyDad @wirestyle22
                  last edited by

                  @wirestyle22 said in DC seems to have fallen off the Domain:

                  repadmin /sync on all domain controllers. What does that return?

                  CALLBACK MESSAGE: Error contacting server cff6859a-1945-4334-aa88-e43a448de794._msdcs.smc.com (network error): -2146893
                  22 (0x80090322):
                      The target principal name is incorrect.
                  CALLBACK MESSAGE: SyncAll Finished.
                  
                  SyncAll reported the following errors:
                  Error contacting server cff6859a-1945-4334-aa88-e43a448de794._msdcs.smc.com (network error): -2146893022 (0x80090322):
                      The target principal name is incorrect.
                  wirestyle22W 1 Reply Last reply Reply Quote 0
                  • wirestyle22W
                    wirestyle22 @NerdyDad
                    last edited by wirestyle22

                    @NerdyDad said in DC seems to have fallen off the Domain:

                    The target principal name is incorrect.

                    Check that these services are all running:
                    Active Directory Domain Services
                    Kerberos Key Distribution Center

                    NerdyDadN 1 Reply Last reply Reply Quote 0
                    • NerdyDadN
                      NerdyDad @wirestyle22
                      last edited by

                      @wirestyle22 said in DC seems to have fallen off the Domain:

                      @NerdyDad said in DC seems to have fallen off the Domain:

                      The target principal name is incorrect.

                      Check that these services are all running:
                      Active Directory Domain Services.
                      Active Directory Replication

                      Have ADDS but not Active Directory Replication

                      wirestyle22W 1 Reply Last reply Reply Quote 0
                      • wirestyle22W
                        wirestyle22 @NerdyDad
                        last edited by wirestyle22

                        @NerdyDad Sorry, check:

                        Kerberos Key Distribution Center in services.msc

                        NerdyDadN 1 Reply Last reply Reply Quote 0
                        • NerdyDadN
                          NerdyDad @wirestyle22
                          last edited by

                          @wirestyle22 said in DC seems to have fallen off the Domain:

                          @NerdyDad Sorry, check:

                          Kerberos Key Distribution Center in services.msc

                          There and Started.

                          1 Reply Last reply Reply Quote 0
                          • NerdyDadN
                            NerdyDad
                            last edited by

                            @wirestyle22 If I ever meet you, I owe you a drink at least.

                            wirestyle22W 1 Reply Last reply Reply Quote 0
                            • wirestyle22W
                              wirestyle22 @NerdyDad
                              last edited by

                              @NerdyDad Oh? you get it working?

                              NerdyDadN 1 Reply Last reply Reply Quote 0
                              • NerdyDadN
                                NerdyDad @wirestyle22
                                last edited by

                                @wirestyle22 said in DC seems to have fallen off the Domain:

                                @NerdyDad Oh? you get it working?

                                Not yet. Just appreciating all of the help.

                                wirestyle22W 1 Reply Last reply Reply Quote 0
                                • wirestyle22W
                                  wirestyle22 @NerdyDad
                                  last edited by wirestyle22

                                  @NerdyDad Don't worry about it. Everyone helps me all of the time.

                                  Check this article out: https://support.microsoft.com/en-us/help/2090913/troubleshooting-ad-replication-error--2146893022-the-target-principal-name-is-incorrect.

                                  1 Reply Last reply Reply Quote 0
                                  • 1
                                  • 2
                                  • 2 / 2
                                  • First post
                                    Last post