DC Question

PCDave · 22 May 2011 at 20:16

I have two servers DC1 & DC2 both on the same domain and at the same level,subnet etc

DC1 has lost DC2s account. I can't remove DC2 from the domain as the options are greyed out. I tried to demote DC2 and re-promote it but I cant demote it error message "the security database on the server does not have a computer account for this workstation trust relationship"

on DC2 there is an account for DC1...

Does anyone have any idea on how I can recreate DC2 account on DC1?

Baz · 22 May 2011 at 20:24

You tried running DCPROMO to remove and re-add it?

PCDave · 22 May 2011 at 20:25

yep I ran that on DC2 but thats when I get the error message "the security database on the server does not have a computer account for this workstation trust relationship"

Uhtred · 23 May 2011 at 05:41

Try using the force switch?

paradigm · 23 May 2011 at 08:12

Are they both Domain Controllers? Just the error message is pretty synonymous with a computer who's AD object has been removed, which seems unlikely with a DC.

If it IS a DC (DC2), then what does AD Sites & Services show? Are there any references to a 2nd DC? Can you replicate configurations from and to both (if both exist)?

Which domain controller holds which FSMO roles? Were/are both a GC?

If they aren't both Domain Controllers, then lol at the naming.

DustyMiller · 23 May 2011 at 17:24

you could always try the netdom command and try to re-assert the secure channel between the two DC's.