event id 2042

[manoa]

I have a single W2K3 SP2 AD forest with two DCs (comp.com). Along with that,
we have four remote sites. Each of these remote sites has a local DC (W2K3
SP2) configure as a child domain (child.comp.com). One of the remote site
was shut down and for over 5 months. We are now asked to remove the child DC
from Parent AD. We have plugged the child DC into our parent network and
assigned it a local IP (different from the remote IP subnet). We are now
getting the Event ID 2042 which states that NTDS Replication can not be
performed due to the 60 days tombstone. We just want to gracefully demote
this child DC. What is the best way to accomplish this without causing any
problems?

 

[Dusko Savatovic]

This may help
http://technet.microsoft.com/en-us/library...610(WS.10).aspx

If not, you will have to use ntdsutil, netdom and ADSIEDIT, clean metadata
of the non-existant child domain.

In short, the procedure below saved me many times.


To restart inbound replication on the destination domain controller
following event ID 2042, you must edit the Allow Replication With Divergent
and Corrupt Partner registry entry in
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters.




"manoa" wrote in message
news:39496129-F5F8-4AB0-9020-3BACCF3CB3EF@microsoft.com...
>I have a single W2K3 SP2 AD forest with two DCs (comp.com). Along with
>that,
> we have four remote sites. Each of these remote sites has a local DC
> (W2K3
> SP2) configure as a child domain (child.comp.com). One of the remote site
> was shut down and for over 5 months. We are now asked to remove the child
> DC
> from Parent AD. We have plugged the child DC into our parent network and
> assigned it a local IP (different from the remote IP subnet). We are now
> getting the Event ID 2042 which states that NTDS Replication can not be
> performed due to the 60 days tombstone. We just want to gracefully demote
> this child DC. What is the best way to accomplish this without causing
> any
> problems?

 

[Meinolf Weber [MVP-DS]]

Hello manoa,

If you like to get rid of the old domain i would use the way of metadata
cleanup according to:
http://support.microsoft.com/kb/230306

If that is done check on AD sites and services for the old DC and delete
it there, also cleanup DNS zones if the machine was DNS server.

Additional see here to remove orphaned DCs:
http://support.microsoft.com/kb/555846/en-us

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I have a single W2K3 SP2 AD forest with two DCs (comp.com). Along
> with that, we have four remote sites. Each of these remote sites has
> a local DC (W2K3 SP2) configure as a child domain (child.comp.com).
> One of the remote site was shut down and for over 5 months. We are
> now asked to remove the child DC from Parent AD. We have plugged the
> child DC into our parent network and assigned it a local IP (different
> from the remote IP subnet). We are now getting the Event ID 2042
> which states that NTDS Replication can not be performed due to the 60
> days tombstone. We just want to gracefully demote this child DC.
> What is the best way to accomplish this without causing any problems?
>