AD Sync problem

Hello,

One of my DC was disconnected from the network for quite a long time and
cannot be synchronized with AD anymore.
I have been trying to apply the http://support.microsoft.com/kb/325850/en-us
procedure to reset the machine account password.
After launching the command "netdom resetpwd /S: ....." I've got the
following error message :
"The machine account password for the local machine could not be reset.
Echec d'ouverture de session : unknown user or incorrect password. The
command failed to complete successfully."

ANy idea to help me ?

Many thanks.

Z.

Hello ZOLTAN,

Just resetting the password isn't enough. How long was it disconnected, if
you are over the tombstone lifetime of 60 days(default on most OS versions
before Windows server 2008), it will be better to reinstall the DC and cleanup
AD database from the old one. This will make sure rpelication can work again.

But please give some more information about the complete domain setup, so
we can maybe give you other advise. Also run dcdiag /v on the running DC
and repadmin /showrepl on a function one and the one that was long time disconnected.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> One of my DC was disconnected from the network for quite a long time
> and
> cannot be synchronized with AD anymore.
> I have been trying to apply the
> http://support.microsoft.com/kb/325850/en-us
> procedure to reset the machine account password.
> After launching the command "netdom resetpwd /S: ....." I've got the
> following error message :
> "The machine account password for the local machine could not be
> reset.
> Echec d'ouverture de session : unknown user or incorrect password. The
> command failed to complete successfully."
> ANy idea to help me ?
>
> Many thanks.
>
> Z.
>

Just rebuild it.

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:. com...
> Hello ZOLTAN,
>
> Just resetting the password isn't enough. How long was it disconnected, if
> you are over the tombstone lifetime of 60 days(default on most OS versions
> before Windows server 2008), it will be better to reinstall the DC and
> cleanup AD database from the old one. This will make sure rpelication can
> work again.
>
> But please give some more information about the complete domain setup, so
> we can maybe give you other advise. Also run dcdiag /v on the running DC
> and repadmin /showrepl on a function one and the one that was long time
> disconnected.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hello,
>>
>> One of my DC was disconnected from the network for quite a long time
>> and
>> cannot be synchronized with AD anymore.
>> I have been trying to apply the
>> http://support.microsoft.com/kb/325850/en-us
>> procedure to reset the machine account password.
>> After launching the command "netdom resetpwd /S: ....." I've got the
>> following error message :
>> "The machine account password for the local machine could not be
>> reset.
>> Echec d'ouverture de session : unknown user or incorrect password. The
>> command failed to complete successfully."
>> ANy idea to help me ?
>>
>> Many thanks.
>>
>> Z.
>>
>
>

Hello Zoltan
I had this problem years ago when I sent an installed additional DC to a
branch office in another country ,there the server loiter for awhile at
customs because of horde of paper work.That branch had few administrative
staff there so I decided to reinstall the server using ILO and clean the
Active Directory Database manually.

you may find this article useful http://support.microsoft.com/kb/216498/en-us

Best Regards
Baris DOGAN
MCT ,CCNA, MCSE 2K/2K3 + Security


"ZOLTAN" wrote:

> Hello,
>
> One of my DC was disconnected from the network for quite a long time and
> cannot be synchronized with AD anymore.
> I have been trying to apply the http://support.microsoft.com/kb/325850/en-us
> procedure to reset the machine account password.
> After launching the command "netdom resetpwd /S: ....." I've got the
> following error message :
> "The machine account password for the local machine could not be reset.
> Echec d'ouverture de session : unknown user or incorrect password. The
> command failed to complete successfully."
>
> ANy idea to help me ?
>
> Many thanks.
>
> Z.