Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

WellKnownObjects AD Container pointing to old Deleted Object

$
0
0

I have posted the same query on the Small Business Forum, but now posting in the General AD Column for more inputs. 

The current scenario is, I am dealing with a 2012 R2 Domain Controller (Only one AD) on which no other computer objects can be added. The error is quite simple "A device attached to the storage is not functioning". Investigation on this error has lead to many things which is an issue with the AD Domain Controller.

This Domain was initially running on SBS which was moved to server 2012R2 and decommissioned. Now the current situation is the Default Computer attribute is pointing to SBSComputers OU which has been deleted and it is not even seen in Deleted Objects. The wellknownObjects is pointing to the OU which is in the Deleted Objects. The current location is below:

B:32:A9D1CA15768811D1ADED00C04FD8D5CD:OU=SBSComputers\0ADEL:4e10ac07-6894-43cb-a7b7-cca05f90a74b,CN=DeletedObjects,DC=XXXXXX,DC=local

When we are trying to change it to a new OU, via both Set-ADObject (Get-ADRootDSE) and redircmp commands, both get an error that the Set Object cannot be found:

PS C:\Windows\system32> Set-ADObject (Get-ADRootDSE).DefaultNamingContext -Remove @{wellKnownObjects = "B:32:AA312825768811D1ADED00C04FD8D5CD:OU=SBSComputers\0ADEL:4e10ac07-6894-43cb-a7b7-cca05f90a74b,CN=Deleted Objects,DC=XXXXXXX,DC=local" } -Add @{wellKnownObjects ="B:32:AA312825768811D1ADED00C04FD8D5CD:CN=Computers,DC=XXXXXXX,DC=local" } -server AD.XXXXXXX.local

Set-ADObject : Directory object not found
At line:1 char:1
+ Set-ADObject (Get-ADRootDSE).DefaultNamingContext -Remove @{wellKnownObjects = " ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (DC=XXXXXXXXX,DC=local:ADObject) [Set-ADObject], ADIdentityNotFoundExce
   ption
    + FullyQualifiedErrorId : ActiveDirectoryCmdlet:Microsoft.ActiveDirectory.Management.ADIdentityNotFoundException,M
   icrosoft.ActiveDirectory.Management.Commands.SetADObject

Tried through ADSI Edit and AD Explorer tool, but not able to modify this entry

PS C:\Windows\system32> redircmp "CN=Computers,DC=XXXXXXX,DC=local"
Error, unable to modify the wellKnownObjects attribute. Verify that
the domain functional level of the domain is at least Windows Server 2003:
No Such Object
Redirection was NOT successful.

The Server is running with Forest and Domain functional level 2012R2, but still the command fails. We only way to get over this is a way to change the Default Computer Object of WellKnownObjects to a valid OU. I checked even third party tools which also fails to accomplish this.

Any assistance on this would be much appreciated.

The responses from the SBS forums can be viewed from the below URL:

https://social.technet.microsoft.com/Forums/en-US/af3b856f-9986-4950-913f-fbbe70d079f4/wellknownobjects-ad-container-pointing-to-old-deleted-object?forum=smallbusinessserver2011essentials

Regards.
Jay


Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>