Error message on 2K DC after failed addition of additional DC

[Chris Donahue]

I recently tried to add an additional domain controller to
my domain. It did not work, so I removed the additional
DC, but now I am getting NTDS KCC 1265 error messages!!
They are as follows:

Event Type: Warning
Event Source: NTDS KCC
Event Category: Knowledge Consistency Checker
Event ID: 1265
Date: 1/12/2004
Time: 11:35:01 AM
User: N/A
Computer: MDTITLE
Description:
The attempt to establish a replication link with parameters

Partition: CN=Schema,CN=Configuration,DC=48-dom-mdtitle
Source DSA DN: CN=NTDS
Settings,CN=MDTITLE2,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=48-dom-mdtitle
Source DSA Address: b8011812-0313-4e1e-988e-
c88d224e97ed._msdcs.48-dom-mdtitle
Inter-site Transport (if any):

failed with the following status:

The DSA operation is unable to proceed because of a DNS
lookup failure.

The record data is the status code. This operation will
be retried.
Data:
0000: 4c 21 00 00 L!..

Is there anyway to fix this issue so I can try to add the
other DC on the same domain again. The server that is
getting the error messages is the primary dc and I would
like to add another dc to remove the old one. Thanks for
the help up front, I know this will probably be a pain.

 

[David Brandt [MSFT]]

I wasn't sure if when you said you "removed it" if this meant that you ran a
successful demotion via dcpromo and then just took it off the wire, if it
was just taken off the wire and/or re-installed without having a successful
demotion, if it's still a "server" in the domain, etc.
If it was just removed, without a successful demotion, either because
dcpromo didn't work or whatever, you will probable need to do a metadata
cleanup on it, and this can be done following the steps in the article below
(lengthly but just follow each step and it should work fine);
216498 HOW TO: Remove Data in Active Directory After an Unsuccessful Domain
http://support.microsoft.com/?id=216498

when you "connect to server <servername>" be sure to connect to the dc
you're on, not the name of the one you're trying to remove.
when you select domain and site, you'll get a msg about no sites and no
servers respectively, but ignore and go to the next step as this just
indicates that you haven't gotten that far yet, but is confusing to some.
Also be sure to delete the dns record in step 17.

If you have multiple dc's, and to speed the removal process up, you can also
follow the last sequence of steps using adsiedit to really clean up the
remains quicker which i would recommend.
Be sure that the removal has replicated to all dc's before adding that one
back in again.

--
David Brandt
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[Chris Donahue]

I tried to do the steps listed on th Q article, but the
second server will not go away, I cannot delete it. What
now??