Domain Controller Offline Too Long
I have a 2003 dc that s a vm vmware workstation.
Domain controller offline too long. Commands to troubleshoot issue. It is also an enterprise root ca. We have a domain controller server 2008 r2 that has been offline for 120 days 180 day tombstone.
Sometimes domain controllers encounter catastrophic failures that take them off the network permanently perhaps a hardware failure or an extended network outage that exceeds the tombstone lifetime. If the d domain option is not used all dc s in the forest will be checked. And it s the only dc in the test ad forest.
A will perform an anonymous ldap search however post 2000 active directory dc s do not allow any. The default for windows 2008 r2 and upward is 180 days. How long can it stay offline for safely without causing issues when i power it back on since this is the only dc in its ad forest.
The specified server admin. You must attach to the unoccupied domain controller account using useexistingaccount and the correct read only or writable argument depending on account type. The dc can be offline based on its tsl tombstonelifetime value and it depends the first dc in the domain added for windows 2000 it is 60 days for windows 2003 it is 180 but tsl value is not.
As long as you do not keep the domain controller shut down longer than the days set for the active directory forest s tombstone lifetime you should be safe. U will perform a generic authenticated ldap search. A domain controller account of conflicting type exists.
P will perform a mscldap ping. Vastool status dc will provide status information about known domain controllers in the forest. Rename the computer before promoting if not trying to attach to an unoccupied domain controller.