Problem with Root / Child Domain

[Guest]

Big problem: root domain xyz.com with several child domains, e.g. child1.xyz.com, child2.xyz.com and so on.
during the installation of the child domain child1.xyz.com we had some problems, so I deleted the domain.
meanwhile this domain was present in active directory.
afther a while i started to install this domain again, it was ok. but now i have an "cnf:bla bla.." error shown in the directory service log of the replication partner in the domain child2.xyz.com:

The Directory Service received a failure while trying to perform an authenticated RPC call to another Domain Controller. The failure is that the desired Service Principal Name (SPN) is not registered on the target server. The server being contacted is ef5a4443-f7c8-4d77-8042-7479833e87d9._msdcs.domain.com. The SPN being used is E3514235-4B06-11D1-AB04-00C04FC2DCD2/ef5a4443-f7c8-4d77-8042-7479833e87d9/childCNF:b69b16a9-dfaa-4c81-bd88-7a1d056cb9f3.domain.com@child
CNF:b69b16a9-dfaa-4c81-bd88-7a1d056cb9f3.domain.com.
Please verify that the names of the target server and domain are correct. Please also verify that the SPN is registered on the computer account object for the target server on the KDC servicing the request. If the target server has been recently promoted, it will be necessary for knowledge of this computer's identity to replicate to the KDC before this computer can be authenticated.

Also when I check this with ntdsutil I can see that there is a conflict: DC="childCNF:b69b16a9-dfaa-4c81-bd88-7a1d056cb9f3",DC=xyz,DC=com", in the other domains it is shown correctly:
DC=child, DC=xyz, DC=com.

What is the solution? How can I remove this conflicting domain and establish a connection to the working domain?
Has anyone experience with this?

I have found some possible solutions, but at this time I´m not shure what to do....

 

[Simon Geary]

Try this article to get rid of the child domain.
http://support.microsoft.com/?id=230306

Big problem: root domain xyz.com with several child domains, e.g.

child1.xyz.com, child2.xyz.com and so on.

during the installation of the child domain child1.xyz.com we had some

problems, so I deleted the domain.

meanwhile this domain was present in active directory.
afther a while i started to install this domain again, it was ok. but now

i have an "cnf:bla bla.." error shown in the directory service log of the
replication partner in the domain child2.xyz.com:

The Directory Service received a failure while trying to perform an

authenticated RPC call to another Domain Controller. The failure is that
the desired Service Principal Name (SPN) is not registered on the target
server. The server being contacted is
ef5a4443-f7c8-4d77-8042-7479833e87d9._msdcs.domain.com. The SPN being used
is
E3514235-4B06-11D1-AB04-00C04FC2DCD2/ef5a4443-f7c8-4d77-8042-7479833e87d9/ch
ildCNF:b69b16a9-dfaa-4c81-bd88-7a1d056cb9f3.domain.com@child

CNF:b69b16a9-dfaa-4c81-bd88-7a1d056cb9f3.domain.com.
Please verify that the names of the target server and domain are correct.

Please also verify that the SPN is registered on the computer account object
for the target server on the KDC servicing the request. If the target
server has been recently promoted, it will be necessary for knowledge of
this computer's identity to replicate to the KDC before this computer can be
authenticated.

Also when I check this with ntdsutil I can see that there is a conflict:

DC="childCNF:b69b16a9-dfaa-4c81-bd88-7a1d056cb9f3",DC=xyz,DC=com", in the
other domains it is shown correctly:

DC=child, DC=xyz, DC=com.

What is the solution? How can I remove this conflicting domain and

establish a connection to the working domain?

Has anyone experience with this?

I have found some possible solutions, but at this time I´m not shure what

to do....

 

[Guest]

thank you for the reply.
the question is: when I remove the cnf:child1.xyz.com domain there, will the current, working child1.xyz.com domain appear after a while, or is this also the non -cnf:domain deleted?

 

[Simon Geary]

The only domains that get removed will be the ones you specify.

thank you for the reply.
the question is: when I remove the cnf:child1.xyz.com domain there, will

the current, working child1.xyz.com domain appear after a while, or is this
also the non -cnf:domain deleted?