Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

Orphaned Domain Deletion effects on Global Catalog Replication

$
0
0

Dear Directory Services,

I've got a situation that I want to bounce off of you to get your input.
FACTS (names changed to protect the 'innocent'):
Multiple-domain Forest containing the following domains:
domain.com
eu.domain.com
us.domain.com
la.domain.com
ap.domain.com

Some time ago, ALL of the Domain Controllers for 'ap.domain.com' were murdered in a mob hit.  They will never be found.

Since their "disappearance" the forest/domain was prepared to receive 2012 Domain Controllers, which of course modified the schema and PAS (GC).

Now, we are receiving the following errors on any Domain Controller which is a GC and, therefore, trying to replicate the dead domain partition:

Trimmed repadmin /showrepl output follows:
Repadmin: running command /showrepl against full DC localhost

US\LADC1

DSA Options: IS_GC

Site Options: (none)

DSA object GUID: c772a48e-4d5e-4e40-af8a-19a17f54de74

DSA invocationID: 8ec79167-d0c6-4b4f-a7c9-dc8594319785

==== INBOUND NEIGHBORS ======================================

...skipping uninteresting info...


DC=ap,DC=domain,DC=com

    AP\APDC1 via RPC

        DSA object GUID: 142d1d97-bf0c-4ab0-8b94-86a3bcf35af4

        Last attempt @ 2016-06-14 13:52:59 was delayed for a normal reason, result 8464 (0x2110):

    Synchronization attempt failed because the destination DC is currently waiting to synchronize new partial attributes from source. This condition is normal if a recent schema change modified the partial attribute set. The destination partial attribute set is not a subset of source partial attribute set.

        Last success @ 2016-06-14 10:53:55.

NOW THE QUESTION:
Since this domain will never return, the GCs will never receive the PAS update from this domain.  IF I DELETE THE DOMAIN (AP.DOMAIN.COM) VIA METADATA CLEANUP, WILL THIS ERROR VANISH??

I understand I may have to manually replicate the configuration partition...but in my mind the KCC on the DC trying to replicate IN this partition will automagically fix itself once it's no longer trying to replicate the domain (i.e. after it finds out the domain has been deleted).

What are your thoughts?


Robert


Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>