Despromocionar 2003 Server (desde 15/07/08 apagado)

Justo por dos días se superó el Tombstone Time :-(
En esos casos no queda otra opción que despromoverlo forzando (DCPROMO
/FORCEREMOVAL), y luego hacer el proceso de limpieza en el AD de acuerdo a:
Cómo quitar datos en Active Directory después de una degradación sin éxito
de un controlador de dominio:
http://support.microsoft.com/kb/216498/es



Guillermo Delprato
MVP - MCT - MCSE
Buenos Aires, Argentina
http://w2k8-server.spaces.live.com

Este mensaje se proporciona "como está" sin garantías de ninguna clase, ni
otorga ningún derecho. Ud. asume los riesgos.
This posting is provide "as is" with no warranties and confers no rights.
You assume all risk for your use.
_____________________


"gk79" wrote in message
news:
Hola

Quiero hacer un dcpromo a un servidor (dc2) que llevaba apagado desde
el 17 de julio. Resulta que me da el siguiente mensaje:
Error en la operación debido a:
Error al administrar la sesión de red con dc1.dominio.local
Error de inicio de sesión: el nombre de cuenta destino es incorrecto.

Además en el visor de sucesos se repite
Id 1030: Userenv
Windows no puede hacer una consulta de la lista de objetos directiva
de grupo. Compruebe el registro de eventos ante la posible existencia
de mensajes previamente registrados por el motor de directiva que
describe el motivo del suceso.
Id 1058 Userenv
Windows no puede obtener acceso al archivo gpt.ini para GPO
CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=dominio,DC=local.
El archivo debe estar presente en la ubicación <\\dominio.local\sysvol
\dominio.local\Policies
\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Acceso denegado. ).
Se ha anulado el proceso de Directiva de grupo.

También adjunto dcdiag y netdiag a ver si alguien me puede ayudar.
DCDIAG

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: dominio\dc2
Starting test: Connectivity
. dc2 passed test Connectivity

Doing primary tests

Testing server: dominio\dc2
Starting test: Replications
[Replications Check,dc2] A recent replication attempt failed:
From DC1 to dc2
Naming Context: DC=DomainDnsZones,DC=dominiolocal,DC=local
The replication generated an error (8524):
La operaci¢n DSA no puede continuar debido a un error en
la consulta DNS.
The failure occurred at 2008-09-17 13:23:02.
The last success occurred at 2008-07-15 08:50:46.
1 failures have occurred since the last success.
The guid-based DNS name 9bdc58e7-1218-41d6-9924-
fab9406a78d6._msdcs.dominiolocal.local
is not registered on one or more DNS servers.
[DC1] DsBindWithSpnEx() failed with error -2146893022,
El nombre principal de destino es incorrecto..
[Replications Check,dc2] A recent replication attempt failed:
From dc3 to dc2
Naming Context: DC=DomainDnsZones,DC=dominiolocal,DC=local
The replication generated an error (8524):
La operaci¢n DSA no puede continuar debido a un error en
la consulta DNS.
The failure occurred at 2008-09-17 13:23:48.
The last success occurred at 2008-07-15 08:50:46.
1 failures have occurred since the last success.
The guid-based DNS name
19ab6eba-655a-4e03-8a98-1a02a36dff84._msdcs.dominiolocal.local
is not registered on one or more DNS servers.
[dc3] DsBindWithSpnEx() failed with error -2146893022,
El nombre principal de destino es incorrecto..
[Replications Check,dc2] A recent replication attempt failed:
From dc1 to dc2
Naming Context: DC=ForestDnsZones,DC=dominiolocal,DC=local
The replication generated an error (8524):
La operaci¢n DSA no puede continuar debido a un error en
la consulta DNS.
The failure occurred at 2008-09-17 13:22:47.
The last success occurred at 2008-07-15 08:50:45.
1 failures have occurred since the last success.
The guid-based DNS name 9bdc58e7-1218-41d6-9924-
fab9406a78d6._msdcs.dominiolocal.local
is not registered on one or more DNS servers.
[Replications Check,dc2] A recent replication attempt failed:
From dc3 to dc2
Naming Context: DC=ForestDnsZones,DC=dominiolocal,DC=local
The replication generated an error (8524):
La operaci¢n DSA no puede continuar debido a un error en
la consulta DNS.
The failure occurred at 2008-09-17 13:23:33.
The last success occurred at 2008-07-15 08:50:45.
1 failures have occurred since the last success.
The guid-based DNS name
19ab6eba-655a-4e03-8a98-1a02a36dff84._msdcs.dominiolocal.local
is not registered on one or more DNS servers.
[Replications Check,dc2] A recent replication attempt failed:
From dc1 to dc2
Naming Context:
CN=Schema,CN=Configuration,DC=dominiolocal,DC=local
The replication generated an error (-2146893022):
El nombre principal de destino es incorrecto.
The failure occurred at 2008-09-17 15:50:57.
The last success occurred at 2008-07-15 08:50:45.
4 failures have occurred since the last success.
[Replications Check,dc2] A recent replication attempt failed:
From dc3 to dc2
Naming Context:
CN=Schema,CN=Configuration,DC=dominiolocal,DC=local
The replication generated an error (-2146893022):
El nombre principal de destino es incorrecto.
The failure occurred at 2008-09-17 15:50:57.
The last success occurred at 2008-07-15 08:50:45.
4 failures have occurred since the last success.
[Replications Check,dc2] A recent replication attempt failed:
From dc3 to dc2
Naming Context: CN=Configuration,DC=dominiolocal,DC=local
The replication generated an error (-2146893022):
El nombre principal de destino es incorrecto.
The failure occurred at 2008-09-17 15:50:57.
The last success occurred at 2008-07-15 08:50:37.
4 failures have occurred since the last success.
[Replications Check,dc2] A recent replication attempt failed:
From dc1 to dc2
Naming Context: CN=Configuration,DC=dominiolocal,DC=local
The replication generated an error (-2146893022):
El nombre principal de destino es incorrecto.
The failure occurred at 2008-09-17 15:50:57.
The last success occurred at 2008-07-15 08:50:45.
4 failures have occurred since the last success.
[Replications Check,dc2] A recent replication attempt failed:
From dc3 to dc2
Naming Context: DC=dominiolocal,DC=local
The replication generated an error (-2146893022):
El nombre principal de destino es incorrecto.
The failure occurred at 2008-09-17 15:50:57.
The last success occurred at 2008-07-15 09:11:15.
4 failures have occurred since the last success.
[Replications Check,dc2] A recent replication attempt failed:
From dc1 to dc2
Naming Context: DC=dominiolocal,DC=local
The replication generated an error (-2146893022):
El nombre principal de destino es incorrecto.
The failure occurred at 2008-09-17 15:50:57.
The last success occurred at 2008-07-15 09:11:19.
4 failures have occurred since the last success.
REPLICATION-RECEIVED LATENCY WARNING
dc2: Current time is 2008-09-17 16:24:38.
DC=DomainDnsZones,DC=dominiolocal,DC=local
Last replication recieved from dc3 at 2008-07-15
08:50:46.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!
Last replication recieved from dc1 at 2008-07-15
08:50:46.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!
DC=ForestDnsZones,DC=dominiolocal,DC=local
Last replication recieved from dc3 at 2008-07-15
08:50:45.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!
Last replication recieved from dc1 at 2008-07-15
08:50:45.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!
CN=Schema,CN=Configuration,DC=dominiolocal,DC=local
Last replication recieved from dc3 at 2008-07-15
08:50:45.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!
Last replication recieved from dc1 at 2008-07-15
08:50:45.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!
CN=Configuration,DC=dominiolocal,DC=local
Last replication recieved from dc3 at 2008-07-15
08:50:37.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!
Last replication recieved from dc1 at 2008-07-15
08:50:45.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!
DC=dominiolocal,DC=local
Last replication recieved from dc3 at 2008-07-15
09:11:15.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!
Last replication recieved from dc1 at 2008-07-15
09:11:19.
WARNING: This latency is over the Tombstone Lifetime
of 60 days!
. dc2 passed test Replications
Starting test: NCSecDesc
. dc2 passed test NCSecDesc
Starting test: NetLogons
. dc2 passed test NetLogons
Starting test: Advertising
. dc2 passed test Advertising
Starting test: KnowsOfRoleHolders
Warning: dc1 is the Schema Owner, but is not responding to DS
RPC Bind.
[dc1] LDAP bind failed with error 8341,
Error del servicio de directorios..
Warning: dc1 is the Schema Owner, but is not responding to
LDAP Bind.
Warning: dc1 is the Domain Owner, but is not responding to DS
RPC Bind.
Warning: dc1 is the Domain Owner, but is not responding to
LDAP Bind.
Warning: dc1 is the PDC Owner, but is not responding to DS
RPC Bind.
Warning: dc1 is the PDC Owner, but is not responding to LDAP
Bind.
Warning: dc1 is the Rid Owner, but is not responding to DS
RPC Bind.
Warning: dc1 is the Rid Owner, but is not responding to LDAP
Bind.
Warning: dc1 is the Infrastructure Update Owner, but is not
responding to DS RPC Bind.
Warning: dc1 is the Infrastructure Update Owner, but is not
responding to LDAP Bind.
. dc2 failed test KnowsOfRoleHolders
Starting test: RidManager
. dc2 failed test RidManager
Starting test: MachineAccount
. dc2 passed test MachineAccount
Starting test: Services
. dc2 passed test Services
Starting test: ObjectsReplicated
. dc2 passed test ObjectsReplicated
Starting test: frssysvol
. dc2 passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours
after the

SYSVOL has been shared. Failing SYSVOL replication problems
may cause

Group Policy problems.
. dc2 failed test frsevent
Starting test: kccevent
. dc2 passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x40000004
Time Generated: 09/17/2008 15:30:36
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 09/17/2008 15:30:36
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 09/17/2008 15:40:25
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 09/17/2008 15:47:42
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 09/17/2008 15:50:57
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 09/17/2008 15:59:19
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 09/17/2008 15:59:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 09/17/2008 16:07:45
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 09/17/2008 16:08:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 09/17/2008 16:08:40
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40011006
Time Generated: 09/17/2008 16:22:01
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 09/17/2008 16:24:16
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 09/17/2008 16:24:16
(Event String could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 09/17/2008 16:24:18
(Event String could not be retrieved)
. dc2 failed test systemlog
Starting test: VerifyReferences
. dc2 passed test VerifyReferences

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
. DomainDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. DomainDnsZones passed test
CheckSDRefDom

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
. ForestDnsZones passed test
CrossRefValidation
Starting test: CheckSDRefDom
. ForestDnsZones passed test
CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
. Schema passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
. Configuration passed test
CrossRefValidation
Starting test: CheckSDRefDom
. Configuration passed test
CheckSDRefDom

Running partition tests on : dominiolocal
Starting test: CrossRefValidation
. dominiolocal passed test
CrossRefValidation
Starting test: CheckSDRefDom
. dominiolocal passed test
CheckSDRefDom

Running enterprise tests on : dominiolocal.local
Starting test: Intersite
. dominiolocal.local passed test
Intersite
Starting test: FsmoCheck
. dominiolocal.local passed test
FsmoCheck


NETDIAG


..

Computer Name: DC2
DNS Host Name: dc2.dominio.local
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 6 Model 7 Stepping 2, GenuineIntel
List of installed hotfixes :
KB824151
KB840987
KB871250
KB890046
KB893066
KB893756
KB893803v2
KB896358
KB896422
KB896423
KB896424
KB896428
KB896688
KB899587
KB899588
KB899589
KB899591
KB900725
KB901017
KB901214
KB902400
KB904706
KB905414
KB905495
Q147222


Netcard queries test . . . . . . . : Failed
GetStats failed for 'Adaptador de LAN PCI HP NetServer 10/100TX -
Trend Micro Common Firewall Miniport'. [ERROR_INVALID_FUNCTION]
GetStats failed for 'Minipuerto WAN (IP) - Trend Micro Common
Firewall Miniport'. [ERROR_INVALID_FUNCTION]
GetStats failed for 'Adaptador de LAN PCI HP NetServer 10/100TX'.
[ERROR_INVALID_FUNCTION]
GetStats failed for 'Paralelo directo'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Minipuerto WAN (PPTP)'.
[ERROR_INVALID_FUNCTION]
GetStats failed for 'Minipuerto WAN (PPPOE)'.
[ERROR_INVALID_FUNCTION]
GetStats failed for 'Minipuerto WAN (IP)'.
[ERROR_INVALID_FUNCTION]
GetStats failed for 'Minipuerto WAN (L2TP)'. [ERROR_NOT_SUPPORTED]
[FATAL] - None of the netcard drivers provided satisfactory
results.



Per interface results:

Adapter : Conexión de área local

Netcard queries test . . . : Failed
NetCard Status: UNKNOWN

Host Name. . . . . . . . . : dc2
IP Address . . . . . . . . : 192.168.48.13
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.48.3
Primary WINS Server. . . . : 192.168.48.10
Dns Servers. . . . . . . . : 192.168.48.10


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{371719F2-3531-4BA7-B0C8-580E14805340}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00>
'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names
defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'192.168.48.10' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{371719F2-3531-4BA7-B0C8-580E14805340}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{371719F2-3531-4BA7-B0C8-580E14805340}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Passed
Secure channel for domain 'dominio' is to '\\dc1.dominio.local'.


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed
[WARNING] Failed to query SPN registration on DC
'dc1.dominio.local'.
[WARNING] Failed to query SPN registration on DC
'dc.domino.local'.


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed
information


The command completed successfully


Gracias!!!