Remove SID

[Gabriel]

Hi all,

I asked this yesterday, but perhaps I didn't give enough
information.

I have the remnants of a trust relationship stuck in AD.
The test server blew up, so I can't remove it gracefully
from AD. The domain doesn't show up under Trusts, but if
I issue "trustdom -sidlist" I can see the details for the
trust still there.

The problem is that the non-existant AD domain has the
same SID as the NT domain I need to trust again. How can
I delete the SID from the database so I can reconnect the
NT account?

The situation I'm in is exactly what is described in this
KB article:

http://support.microsoft.com/default.aspx?scid=kb;en-
us;311242

I was trying to upgrade my NT domain with a testbed
server. It blew up, but left a remnant of itself in AD--
this is why I have duplicate SIDs.

Any answers? Please, I have to reconnect these domains.

Thanks,
Gabriel

 

[Aimme Lirette MSFT]

You need to check Active Directory for a lingering trusted domain object.
You can use ADSIEDIT.msc and go to the following location:

In the Domain NC:
DC=parentdomain, DC=com CN=System
Check for the trustedDomain object located on CN=System
You can then delete the trustedDomain object for the domain that no longer
exists.

Be very sure you know what you are deleting in ADSIEDIT- and be very
careful.

Thank you!
Aimme Lirette