Description: you have a domain controller named for example test.local and inside active directory users and computers when you want to change the domain controller, you notice sub domains such as sub.test.local; these sub domains of course do not exist and you need to remove them from your AD.
First and to make it short, the creation of subdomain is often due to a connectivity problem (DNS for example) or a multiple instance of DCPROMO that was unsuccessful after promoting a new domain in a new forest. There may be other reasons as well.
So what are the steps to take care of this issue?
1) removal of DCs
2) seizing FSMOs role and deleting them.
Do not try FSMO role as a first step then remove a DC.
Also you may notice an error msg " The FSMO role ownership could not be verified because its directory partition has not replicated succesfully with at least one replication" (error 0x21a2). For my case, I found out that the order of creation of sub child domain would take care of this error. Remove first the subdomain that was created first, then remove the second one if you have more than 2 to delete.
There are also other tricks with repadmin but it would not take care of my issue.
Also to remove FSMOs roles to another domain controller, refer to this article.
No comments:
Post a Comment