similar to: DC demote

Hi, Does anyone have any experience, good or bad, with "Remove Active Directory Domain Controller Metadata" script from technet: http://gallery.technet.microsoft.com/scriptcenter/d31f091f-2642-4ede-9f97-0e1cc4d577f3 Regards, MJ

I removed a DC using the DC removal tool mentioned in http://gallery.technet.microsoft.com/scriptcenter/d31f091f-2642-4ede-9f97-0e1cc4d577f3 as https://bugzilla.samba.org/show_bug.cgi?id=10734 prevents normal DC demotion. The DC was still all over in DNS, so I had to pick it out. Now replication between the remaining three DCs is broken [root at larkin26 ~]# samba-tool drs showrepl

Hi Jason/Rowland Great news! the following procedure worked perfectly... I added at the end "Remove manually Windows DC entries in DNS" The script used in step 9 was " https://gallery.technet.microsoft.com/scriptcenter/d31f091f-2642-4ede-9f97-0e1cc4d577f3 " *Very thanks for all!* Anderson Hoffmann do Carmo MCP | MTA | MCDST | MCTS | MCSA | MS | MOS | ITIL-F | ISFS | CLOUDF

Hi I have a DC server (named dc-server1) with corrupted database. I transferred all FSMO to dc-server2 and now I'm trying to demote dc-server1 running "samba-tool domain demote --verbose --remove-other-dead-server=dc-server1" on dc-server2, but the following error occurred. The problem continues even after running "samba-tool dbcheck --cross-ncs --fix --yes". Samba

Hi, Our DC1 had to be taken offline due to corruption. Roles were seized, and I managed to get rid of the directory metadata by using this script from microsoft: http://gallery.technet.microsoft.com/scriptcenter/d31f091f-2642-4ede-9f97-0e1cc4d577f3 After that I had to remove the remaining DNS stuff, and now everything seems to be in perfect shape, with dc2/dc3/dc4, replicating perfectly, no

Samba version: 4.1.16 OS: Centos 6.6 Domain version: 2008R2 PDC OS: Windows 2008R2 DC2 When I promote a 2008R2 server as a secondary DC in the samba AD domain, everything seems to work great (Replication and all) Except I am unable to create NEW records. I can update and change existing records but not create any new records via the DNS tool on the win2008R2 server. However if i

Thank you for hint to this VBS script. In fact I alraedy saw it but I'm not too confident in my VB knowledge, so I didn't use that script, prefering rely on Samba command and shell scripts to work around issues. You spoke about SOA record which wasn't changed, same here. There is another DNS record I had to change: _ldap._tcp.pdc._msdcs.samba.domain.tld. I spoke about removing

Hi, I played with demote recently on a test AD domain composed with Samba version 4.3.0 and 4.3.1. I demoted all version 4.3.0. I was facing same issue as you. I written long mails here to explain how I managed that. My DNS looks clear now. Today I played with AD sites and I found in default sites all demoted DC. They weren't removed from DNS DB nor here. For now I have no idea how to get

On 12/07/16 13:33, Jason Waters wrote: > This is what I would do. > > 1. Make sure everything is off of the 2008 machine so you don't need to > turn it back on > 2. Shut down the 2008 machine > 2.5 Update your DNS on the samba machine to be the samba machine, not the > 2008 DC > 3. Test everything and make sure samba is fully working on your domain > 4. Test

On 10/29/2015 9:15 AM, Ole Traupe wrote: > > > Am 29.10.2015 um 13:54 schrieb mathias dufresne: >> Thank you for hint to this VBS script. In fact I alraedy saw it but >> I'm not >> too confident in my VB knowledge, so I didn't use that script, prefering >> rely on Samba command and shell scripts to work around issues. >> >> You spoke about SOA

Commented inbetween. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ole Traupe > Verzonden: donderdag 17 december 2015 13:51 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Authentication to Secondary Domain Controller > initially fails when PDC is offline > > > > Am 11.12.2015 um 15:31 schrieb L.P.H. van

On 10/29/2015 9:56 AM, Ole Traupe wrote: > > > Am 29.10.2015 um 14:37 schrieb James: >> On 10/29/2015 9:15 AM, Ole Traupe wrote: >>> >>> >>> Am 29.10.2015 um 13:54 schrieb mathias dufresne: >>>> Thank you for hint to this VBS script. In fact I alraedy saw it but >>>> I'm not >>>> too confident in my VB knowledge, so

On 10/30/2015 9:19 AM, Ole Traupe wrote: > > > Am 30.10.2015 um 13:33 schrieb James: >> On 10/29/2015 9:56 AM, Ole Traupe wrote: >>> >>> >>> Am 29.10.2015 um 14:37 schrieb James: >>>> On 10/29/2015 9:15 AM, Ole Traupe wrote: >>>>> >>>>> >>>>> Am 29.10.2015 um 13:54 schrieb mathias dufresne:

Hi everybody, One of my DC crash this afternoon (dead disk). I can't remove this DC server from windows GUI (computer object from < users and computers >) and NTDS settings from < sites and services > because windows GUI error. So i manually remove this old server : - Clean all DNS stuff (tpc, sites, kerberos, kpasswd, srv entries.....) - With apache directory

Solved ! Thanks for the script. In my case, it was just too late. I have just found a ugly but working solution: From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. No more trouble with drs showrepl :-) -----Message d'origine----- De : samba [mailto:samba-bounces at lists.samba.org] De la part de Stefan Kania

On 10/30/2015 10:11 AM, Ole Traupe wrote: > > > Am 30.10.2015 um 14:56 schrieb James: >> On 10/30/2015 9:19 AM, Ole Traupe wrote: >>> >>> >>> Am 30.10.2015 um 13:33 schrieb James: >>>> On 10/29/2015 9:56 AM, Ole Traupe wrote: >>>>> >>>>> >>>>> Am 29.10.2015 um 14:37 schrieb James:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi all, What would be the recommended way to remove an old offline DC from Samba4? I searched in samba-tool for a way to do this, but didn't find any. Tried using the Windows tools to manage AD Users & Computers -> Domain Controllers -> The DC & then hit delete, however this gives an error 'cannot find specified module'.

Thank you Rowland to noticed that. Here it is: ------------------------------------------------------------------ #!/usr/bin/awk BEGIN { ad_zone = "YOUR.DOMAIN.TLD" msdcs_zone = "_msdcs." ad_zone dns_server = "YOUR-DC" } { if ($0 ~ /UPDATE SECTION:/) { getline print NF, $0 if ($4 == "A") { if($1 ~ /_msdcs/) { zone =

Hi mathias, thanks for the heads-up! However, my AD Sites and Services is clear, too. I followed the suggestion here https://wiki.samba.org/index.php/Demote_a_Samba_AD_DC to use this http://gallery.technet.microsoft.com/scriptcenter/d31f091f-2642-4ede-9f97-0e1cc4d577f3#content script. Copy the contents of the "Visual Basic" box to a text file and rename it to

Hi Denis, I have seen in an old post that you have tested new KCC from full mesh to bridge head at a french school. Is your "drs showrepl" correct on such DC's ? In my case, a drs showrepl is showing a full mesh on inbound and outbound (not good) but only 1 KCC connection objects (good) Where is a full description of my trouble: