how to remove and reinstall kerberos service(KDC)

[umut]

in my test environment i have 4 dcs in 4 sites..one of
them logs numerous kerberos logs but client in its site
authenticate from this dc..

my problem is about replication from this server to others
i mean that as an inbound server this dc does not have a
connection object with others but it works as an outbound
server...i mean it replicates from others but others can
not from it..
as all u know replication takes place after authentication
between dcs i guess there may be a problem here so i think
that reinstall kerberos service or database in this dc..

but how???

or any other idea????

 

[IBTerry [MSFT]]

There is no way to reinstall the KDC or Kerberos. If this is a test lab
and you have three other domain controllers the easiest thing to do maybe
to DCPROMO down to a memberserver...then DCPROMO back to a DC.

If you want to troubleshoot why this is happening you could run MPSreports
on the server.
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_DirSvc.EXE
This tool will run most of the tools that you would need to troubleshoot a
domain controller issue.

IBTerry [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[umut]

first of all thanks for the address...


hopefully i tried to start dcpromo but you know when a dc
is depromoted to a member server it tries to replicate all
updates it has to others..and it did not!!!!so dcpromo
never works!!...

maybe ntdsutil fix it up!!

umut