AD forest database corrupted!

I have problem with my AD forest domain. The AD database of my forest/root
domain server is corrupted and I don't have a system state backup of the
forest/root server. I know the AD database is corrupted because when I boot
up the server normally it gets to a point saying "rebuilding Active
Directory indices..." but it fails to complete the AD rebuilding. It then
displays an error message saying "Directory Service cannot start.....", it
then suggest that I should try starting the server in Active Directory
Restore Mode.
I am able to start the forest /root server in AD restore mode and tried all
the database recovery steps and commands from TechNet but still can't fix
the problem. I know my last option is to reinstall the server since I don't
have a system state backup for the restore process. But am scared to do this
because I don't want to lose my child domain servers functionalities and
connections to the forest domain. My child domain servers are responsible
for authentication of all computer and user accounts on the network. All
users on the domain still can logon to the domain and carry out domain tasks
even with the forest domain server offline.

My question is if I reinstall the forest domain server, will I lose the
connection and functionality of my child domain server which is working
"fine" presently. Secondly, will domain applications that depends on some
functionalities of the schema and domain naming master roles (held present
by my faulty forest/root server) continue to function properly. Thirdly, is
there any way I can repair the server without reinstalling.

My AD domain/server setup is as follows:
- Forest/Parent Domain: DC1.rootdomainname.com
- Child Domain: DC1.childdomainname.rootdomainname.com &
DC2.childdomainname.rootdomainname.com

Please any help will be appreciated.

Hello Kingsley,

If you don't have a backup and the you don't have an additional DC in the
root you are lost if the server is ont to repair. Which event viewer errors
do you have in Directory Services event? Are you able to logon after the
error message or does it directly reboot?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I have problem with my AD forest domain. The AD database of my
> forest/root
> domain server is corrupted and I don't have a system state backup of
> the
> forest/root server. I know the AD database is corrupted because when I
> boot
> up the server normally it gets to a point saying "rebuilding Active
> Directory indices..." but it fails to complete the AD rebuilding. It
> then
> displays an error message saying "Directory Service cannot
> start.....", it
> then suggest that I should try starting the server in Active Directory
> Restore Mode.
> I am able to start the forest /root server in AD restore mode and
> tried all
> the database recovery steps and commands from TechNet but still can't
> fix
> the problem. I know my last option is to reinstall the server since I
> don't
> have a system state backup for the restore process. But am scared to
> do this
> because I don't want to lose my child domain servers functionalities
> and
> connections to the forest domain. My child domain servers are
> responsible
> for authentication of all computer and user accounts on the network.
> All
> users on the domain still can logon to the domain and carry out domain
> tasks
> even with the forest domain server offline.
> My question is if I reinstall the forest domain server, will I lose
> the connection and functionality of my child domain server which is
> working "fine" presently. Secondly, will domain applications that
> depends on some functionalities of the schema and domain naming master
> roles (held present by my faulty forest/root server) continue to
> function properly. Thirdly, is there any way I can repair the server
> without reinstalling.
>
> My AD domain/server setup is as follows:
> - Forest/Parent Domain: DC1.rootdomainname.com
> - Child Domain: DC1.childdomainname.rootdomainname.com &
> DC2.childdomainname.rootdomainname.com
> Please any help will be appreciated.
>

You are in a huge predicament. I would spend the $259.00 and call Microsoft
Product Support. If you lose the root of your forest all childs will
eventually whither and die. If you attempt to reinstall all it will do is
create a new forest, you won't be able to add or delete any new domains
without the forest root available. Without a backup or a second dc you have
to get this root repaired.

Call PSS
http://support.microsoft.com/select/...get=assistance
800 936 4900

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Kingsley Akhimien" <d_worldsgreatest@hotmail.com> wrote in message
news:E427F8A4-C451-4A88-8B45-462AC7D9883D@microsoft.com...
>I have problem with my AD forest domain. The AD database of my forest/root
>domain server is corrupted and I don't have a system state backup of the
>forest/root server. I know the AD database is corrupted because when I boot
> up the server normally it gets to a point saying "rebuilding Active
> Directory indices..." but it fails to complete the AD rebuilding. It then
> displays an error message saying "Directory Service cannot start.....", it
> then suggest that I should try starting the server in Active Directory
> Restore Mode.
> I am able to start the forest /root server in AD restore mode and tried
> all the database recovery steps and commands from TechNet but still can't
> fix the problem. I know my last option is to reinstall the server since I
> don't
> have a system state backup for the restore process. But am scared to do
> this because I don't want to lose my child domain servers functionalities
> and connections to the forest domain. My child domain servers are
> responsible
> for authentication of all computer and user accounts on the network. All
> users on the domain still can logon to the domain and carry out domain
> tasks even with the forest domain server offline.
>
> My question is if I reinstall the forest domain server, will I lose the
> connection and functionality of my child domain server which is working
> "fine" presently. Secondly, will domain applications that depends on some
> functionalities of the schema and domain naming master roles (held present
> by my faulty forest/root server) continue to function properly. Thirdly,
> is there any way I can repair the server without reinstalling.
>
> My AD domain/server setup is as follows:
> - Forest/Parent Domain: DC1.rootdomainname.com
> - Child Domain: DC1.childdomainname.rootdomainname.com &
> DC2.childdomainname.rootdomainname.com
>
> Please any help will be appreciated.
>
>
>

Root domain is essential to the functioning of entire forest - so
reinstalling the DC is not the option here. For implications, refer to
http://blogs.technet.com/instan/arch...rest-root.aspx

Without a valid backup, your options are limited (I assume you already tried
http://support.microsoft.com/kb/258062 - correct?). Besides learning a
valuable lesson first-hand, you could also try promoting another DC in the
same domain, although I doubt that this will be successful. Ultimately, you
might need to look into migration of your forest...

hth
Marcin

"Kingsley Akhimien" <d_worldsgreatest@hotmail.com> wrote in message
news:E427F8A4-C451-4A88-8B45-462AC7D9883D@microsoft.com...
>I have problem with my AD forest domain. The AD database of my forest/root
>domain server is corrupted and I don't have a system state backup of the
>forest/root server. I know the AD database is corrupted because when I boot
> up the server normally it gets to a point saying "rebuilding Active
> Directory indices..." but it fails to complete the AD rebuilding. It then
> displays an error message saying "Directory Service cannot start.....", it
> then suggest that I should try starting the server in Active Directory
> Restore Mode.
> I am able to start the forest /root server in AD restore mode and tried
> all the database recovery steps and commands from TechNet but still can't
> fix the problem. I know my last option is to reinstall the server since I
> don't
> have a system state backup for the restore process. But am scared to do
> this because I don't want to lose my child domain servers functionalities
> and connections to the forest domain. My child domain servers are
> responsible
> for authentication of all computer and user accounts on the network. All
> users on the domain still can logon to the domain and carry out domain
> tasks even with the forest domain server offline.
>
> My question is if I reinstall the forest domain server, will I lose the
> connection and functionality of my child domain server which is working
> "fine" presently. Secondly, will domain applications that depends on some
> functionalities of the schema and domain naming master roles (held present
> by my faulty forest/root server) continue to function properly. Thirdly,
> is there any way I can repair the server without reinstalling.
>
> My AD domain/server setup is as follows:
> - Forest/Parent Domain: DC1.rootdomainname.com
> - Child Domain: DC1.childdomainname.rootdomainname.com &
> DC2.childdomainname.rootdomainname.com
>
> Please any help will be appreciated.
>
>
>

Marcin,
Will he be able to establish a trust without the forest root?

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Marcin" <marcin@community.nospam> wrote in message
news:uj8mqC4DKHA.1540@TK2MSFTNGP02.phx.gbl...
> Root domain is essential to the functioning of entire forest - so
> reinstalling the DC is not the option here. For implications, refer to
> http://blogs.technet.com/instan/arch...rest-root.aspx
>
> Without a valid backup, your options are limited (I assume you already
> tried http://support.microsoft.com/kb/258062 - correct?). Besides learning
> a valuable lesson first-hand, you could also try promoting another DC in
> the same domain, although I doubt that this will be successful.
> Ultimately, you might need to look into migration of your forest...
>
> hth
> Marcin
>
> "Kingsley Akhimien" <d_worldsgreatest@hotmail.com> wrote in message
> news:E427F8A4-C451-4A88-8B45-462AC7D9883D@microsoft.com...
>>I have problem with my AD forest domain. The AD database of my forest/root
>>domain server is corrupted and I don't have a system state backup of the
>>forest/root server. I know the AD database is corrupted because when I
>>boot
>> up the server normally it gets to a point saying "rebuilding Active
>> Directory indices..." but it fails to complete the AD rebuilding. It then
>> displays an error message saying "Directory Service cannot start.....",
>> it then suggest that I should try starting the server in Active Directory
>> Restore Mode.
>> I am able to start the forest /root server in AD restore mode and tried
>> all the database recovery steps and commands from TechNet but still can't
>> fix the problem. I know my last option is to reinstall the server since I
>> don't
>> have a system state backup for the restore process. But am scared to do
>> this because I don't want to lose my child domain servers
>> functionalities and connections to the forest domain. My child domain
>> servers are responsible
>> for authentication of all computer and user accounts on the network. All
>> users on the domain still can logon to the domain and carry out domain
>> tasks even with the forest domain server offline.
>>
>> My question is if I reinstall the forest domain server, will I lose the
>> connection and functionality of my child domain server which is working
>> "fine" presently. Secondly, will domain applications that depends on some
>> functionalities of the schema and domain naming master roles (held
>> present by my faulty forest/root server) continue to function properly.
>> Thirdly, is there any way I can repair the server without reinstalling.
>>
>> My AD domain/server setup is as follows:
>> - Forest/Parent Domain: DC1.rootdomainname.com
>> - Child Domain: DC1.childdomainname.rootdomainname.com &
>> DC2.childdomainname.rootdomainname.com
>>
>> Please any help will be appreciated.
>>
>>
>>
>
>

Paul,
as far as I understand, it still should be possible to create domain-level
trusts..

best regards,
Marcin

"Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
news:%23u95cF4DKHA.4608@TK2MSFTNGP02.phx.gbl...
> Marcin,
> Will he be able to establish a trust without the forest root?
>
> --
> Paul Bergson
> MVP - Directory Services
> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup This
> posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Marcin" <marcin@community.nospam> wrote in message
> news:uj8mqC4DKHA.1540@TK2MSFTNGP02.phx.gbl...
>> Root domain is essential to the functioning of entire forest - so
>> reinstalling the DC is not the option here. For implications, refer to
>> http://blogs.technet.com/instan/arch...rest-root.aspx
>>
>> Without a valid backup, your options are limited (I assume you already
>> tried http://support.microsoft.com/kb/258062 - correct?). Besides
>> learning a valuable lesson first-hand, you could also try promoting
>> another DC in the same domain, although I doubt that this will be
>> successful. Ultimately, you might need to look into migration of your
>> forest...
>>
>> hth
>> Marcin
>>
>> "Kingsley Akhimien" <d_worldsgreatest@hotmail.com> wrote in message
>> news:E427F8A4-C451-4A88-8B45-462AC7D9883D@microsoft.com...
>>>I have problem with my AD forest domain. The AD database of my
>>>forest/root domain server is corrupted and I don't have a system state
>>>backup of the forest/root server. I know the AD database is corrupted
>>>because when I boot
>>> up the server normally it gets to a point saying "rebuilding Active
>>> Directory indices..." but it fails to complete the AD rebuilding. It
>>> then displays an error message saying "Directory Service cannot
>>> start.....", it then suggest that I should try starting the server in
>>> Active Directory Restore Mode.
>>> I am able to start the forest /root server in AD restore mode and tried
>>> all the database recovery steps and commands from TechNet but still
>>> can't fix the problem. I know my last option is to reinstall the server
>>> since I don't
>>> have a system state backup for the restore process. But am scared to do
>>> this because I don't want to lose my child domain servers
>>> functionalities and connections to the forest domain. My child domain
>>> servers are responsible
>>> for authentication of all computer and user accounts on the network. All
>>> users on the domain still can logon to the domain and carry out domain
>>> tasks even with the forest domain server offline.
>>>
>>> My question is if I reinstall the forest domain server, will I lose the
>>> connection and functionality of my child domain server which is working
>>> "fine" presently. Secondly, will domain applications that depends on
>>> some functionalities of the schema and domain naming master roles (held
>>> present by my faulty forest/root server) continue to function properly.
>>> Thirdly, is there any way I can repair the server without reinstalling.
>>>
>>> My AD domain/server setup is as follows:
>>> - Forest/Parent Domain: DC1.rootdomainname.com
>>> - Child Domain: DC1.childdomainname.rootdomainname.com &
>>> DC2.childdomainname.rootdomainname.com
>>>
>>> Please any help will be appreciated.
>>>
>>>
>>>
>>
>>
>
>

I can confirm this.
It's possible create domain trusts with domains in another forests without
the forest root domain.
Problems begins if you will need access to Enterprise & Schema Admins
groups.
So, my advice in case PSS will not be able to solve this issue, is to do a
migration to a new forest.

PS: you child domain will continue working without the forest root for an
unlimited period of time (probably); but eventually you will need something
from the forest root.

Regards,
Andrei Ungureanu
www.itboard.ro

"Marcin" <marcin@community.nospam> a scris în mesaj
news:OoBPj04DKHA.5092@TK2MSFTNGP03.phx.gbl...
> Paul,
> as far as I understand, it still should be possible to create domain-level
> trusts..
>
> best regards,
> Marcin
>
> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
> news:%23u95cF4DKHA.4608@TK2MSFTNGP02.phx.gbl...
>> Marcin,
>> Will he be able to establish a trust without the forest root?
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>> 2008, 2003, 2000 (Early Achiever), NT4
>> Microsoft's Thrive IT Pro of the Month - June 2009
>>
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewsGroup This
>> posting is provided "AS IS" with no warranties, and confers no rights.
>>
>> "Marcin" <marcin@community.nospam> wrote in message
>> news:uj8mqC4DKHA.1540@TK2MSFTNGP02.phx.gbl...
>>> Root domain is essential to the functioning of entire forest - so
>>> reinstalling the DC is not the option here. For implications, refer to
>>> http://blogs.technet.com/instan/arch...rest-root.aspx
>>>
>>> Without a valid backup, your options are limited (I assume you already
>>> tried http://support.microsoft.com/kb/258062 - correct?). Besides
>>> learning a valuable lesson first-hand, you could also try promoting
>>> another DC in the same domain, although I doubt that this will be
>>> successful. Ultimately, you might need to look into migration of your
>>> forest...
>>>
>>> hth
>>> Marcin
>>>
>>> "Kingsley Akhimien" <d_worldsgreatest@hotmail.com> wrote in message
>>> news:E427F8A4-C451-4A88-8B45-462AC7D9883D@microsoft.com...
>>>>I have problem with my AD forest domain. The AD database of my
>>>>forest/root domain server is corrupted and I don't have a system state
>>>>backup of the forest/root server. I know the AD database is corrupted
>>>>because when I boot
>>>> up the server normally it gets to a point saying "rebuilding Active
>>>> Directory indices..." but it fails to complete the AD rebuilding. It
>>>> then displays an error message saying "Directory Service cannot
>>>> start.....", it then suggest that I should try starting the server in
>>>> Active Directory Restore Mode.
>>>> I am able to start the forest /root server in AD restore mode and tried
>>>> all the database recovery steps and commands from TechNet but still
>>>> can't fix the problem. I know my last option is to reinstall the server
>>>> since I don't
>>>> have a system state backup for the restore process. But am scared to do
>>>> this because I don't want to lose my child domain servers
>>>> functionalities and connections to the forest domain. My child domain
>>>> servers are responsible
>>>> for authentication of all computer and user accounts on the network.
>>>> All users on the domain still can logon to the domain and carry out
>>>> domain tasks even with the forest domain server offline.
>>>>
>>>> My question is if I reinstall the forest domain server, will I lose
>>>> the connection and functionality of my child domain server which is
>>>> working "fine" presently. Secondly, will domain applications that
>>>> depends on some functionalities of the schema and domain naming master
>>>> roles (held present by my faulty forest/root server) continue to
>>>> function properly. Thirdly, is there any way I can repair the server
>>>> without reinstalling.
>>>>
>>>> My AD domain/server setup is as follows:
>>>> - Forest/Parent Domain: DC1.rootdomainname.com
>>>> - Child Domain: DC1.childdomainname.rootdomainname.com &
>>>> DC2.childdomainname.rootdomainname.com
>>>>
>>>> Please any help will be appreciated.
>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>

Hi Adrei,

Thanks for your post, it answered some questions. Another question I'm
having is when I migrate to a new forest will I also need to migrate my
child domain to the new forest or will it automatically recognized the "old
child domain". I need to know this because I have about 650 user accounts in
my child domain, so I want to know what options do I have?

Kingsley


"Andrei Ungureanu" <itboard.ro> wrote in message
news:%23$BmOt6DKHA.4220@TK2MSFTNGP02.phx.gbl...
>I can confirm this.
> It's possible create domain trusts with domains in another forests without
> the forest root domain.
> Problems begins if you will need access to Enterprise & Schema Admins
> groups.
> So, my advice in case PSS will not be able to solve this issue, is to do a
> migration to a new forest.
>
> PS: you child domain will continue working without the forest root for an
> unlimited period of time (probably); but eventually you will need
> something from the forest root.
>
> Regards,
> Andrei Ungureanu
> www.itboard.ro
>
> "Marcin" <marcin@community.nospam> a scris în mesaj
> news:OoBPj04DKHA.5092@TK2MSFTNGP03.phx.gbl...
>> Paul,
>> as far as I understand, it still should be possible to create
>> domain-level trusts..
>>
>> best regards,
>> Marcin
>>
>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>> news:%23u95cF4DKHA.4608@TK2MSFTNGP02.phx.gbl...
>>> Marcin,
>>> Will he be able to establish a trust without the forest root?
>>>
>>> --
>>> Paul Bergson
>>> MVP - Directory Services
>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>> 2008, 2003, 2000 (Early Achiever), NT4
>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>
>>> http://www.pbbergs.com
>>>
>>> Please no e-mails, any questions should be posted in the NewsGroup This
>>> posting is provided "AS IS" with no warranties, and confers no rights.
>>>
>>> "Marcin" <marcin@community.nospam> wrote in message
>>> news:uj8mqC4DKHA.1540@TK2MSFTNGP02.phx.gbl...
>>>> Root domain is essential to the functioning of entire forest - so
>>>> reinstalling the DC is not the option here. For implications, refer to
>>>> http://blogs.technet.com/instan/arch...rest-root.aspx
>>>>
>>>> Without a valid backup, your options are limited (I assume you already
>>>> tried http://support.microsoft.com/kb/258062 - correct?). Besides
>>>> learning a valuable lesson first-hand, you could also try promoting
>>>> another DC in the same domain, although I doubt that this will be
>>>> successful. Ultimately, you might need to look into migration of your
>>>> forest...
>>>>
>>>> hth
>>>> Marcin
>>>>
>>>> "Kingsley Akhimien" <d_worldsgreatest@hotmail.com> wrote in message
>>>> news:E427F8A4-C451-4A88-8B45-462AC7D9883D@microsoft.com...
>>>>>I have problem with my AD forest domain. The AD database of my
>>>>>forest/root domain server is corrupted and I don't have a system state
>>>>>backup of the forest/root server. I know the AD database is corrupted
>>>>>because when I boot
>>>>> up the server normally it gets to a point saying "rebuilding Active
>>>>> Directory indices..." but it fails to complete the AD rebuilding. It
>>>>> then displays an error message saying "Directory Service cannot
>>>>> start.....", it then suggest that I should try starting the server in
>>>>> Active Directory Restore Mode.
>>>>> I am able to start the forest /root server in AD restore mode and
>>>>> tried all the database recovery steps and commands from TechNet but
>>>>> still can't fix the problem. I know my last option is to reinstall the
>>>>> server since I don't
>>>>> have a system state backup for the restore process. But am scared to
>>>>> do this because I don't want to lose my child domain servers
>>>>> functionalities and connections to the forest domain. My child domain
>>>>> servers are responsible
>>>>> for authentication of all computer and user accounts on the network.
>>>>> All users on the domain still can logon to the domain and carry out
>>>>> domain tasks even with the forest domain server offline.
>>>>>
>>>>> My question is if I reinstall the forest domain server, will I lose
>>>>> the connection and functionality of my child domain server which is
>>>>> working "fine" presently. Secondly, will domain applications that
>>>>> depends on some functionalities of the schema and domain naming master
>>>>> roles (held present by my faulty forest/root server) continue to
>>>>> function properly. Thirdly, is there any way I can repair the server
>>>>> without reinstalling.
>>>>>
>>>>> My AD domain/server setup is as follows:
>>>>> - Forest/Parent Domain: DC1.rootdomainname.com
>>>>> - Child Domain: DC1.childdomainname.rootdomainname.com &
>>>>> DC2.childdomainname.rootdomainname.com
>>>>>
>>>>> Please any help will be appreciated.
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>

Hello Meinolf,

I can't logon to the server after the error message, it just reboot
automatically. But i can logon to Directory Services Restore Mode. Am in a
big mess......and am scared of loosing my entire domain. I have over 650
user accounts that reply on the domain for their daily job. I also have
Exchange 2003 and ISA 2004 on the domain. I'm really scared.



"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb662b2e08cbdda7c47ca726@msnews.microsoft.com...
> Hello Kingsley,
>
> If you don't have a backup and the you don't have an additional DC in the
> root you are lost if the server is ont to repair. Which event viewer
> errors do you have in Directory Services event? Are you able to logon
> after the error message or does it directly reboot?
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> I have problem with my AD forest domain. The AD database of my
>> forest/root
>> domain server is corrupted and I don't have a system state backup of
>> the
>> forest/root server. I know the AD database is corrupted because when I
>> boot
>> up the server normally it gets to a point saying "rebuilding Active
>> Directory indices..." but it fails to complete the AD rebuilding. It
>> then
>> displays an error message saying "Directory Service cannot
>> start.....", it
>> then suggest that I should try starting the server in Active Directory
>> Restore Mode.
>> I am able to start the forest /root server in AD restore mode and
>> tried all
>> the database recovery steps and commands from TechNet but still can't
>> fix
>> the problem. I know my last option is to reinstall the server since I
>> don't
>> have a system state backup for the restore process. But am scared to
>> do this
>> because I don't want to lose my child domain servers functionalities
>> and
>> connections to the forest domain. My child domain servers are
>> responsible
>> for authentication of all computer and user accounts on the network.
>> All
>> users on the domain still can logon to the domain and carry out domain
>> tasks
>> even with the forest domain server offline.
>> My question is if I reinstall the forest domain server, will I lose
>> the connection and functionality of my child domain server which is
>> working "fine" presently. Secondly, will domain applications that
>> depends on some functionalities of the schema and domain naming master
>> roles (held present by my faulty forest/root server) continue to
>> function properly. Thirdly, is there any way I can repair the server
>> without reinstalling.
>>
>> My AD domain/server setup is as follows:
>> - Forest/Parent Domain: DC1.rootdomainname.com
>> - Child Domain: DC1.childdomainname.rootdomainname.com &
>> DC2.childdomainname.rootdomainname.com
>> Please any help will be appreciated.
>>
>
>

Hello Kingsley,

The "AD migration" is not a simple task. You can't just move or copy a
domain or forest.
The whole operation involves copying all the objects from your child domain
to a new domain in a new forest. After that all computers and servers should
be joined to the new domain. You don't need to go and touch each computer
(the ADMT agent will do this task).

Have you listen to Paul advice and call PSS? That should be the first step.

Regards,
Andrei Ungureanu
www.itboard.ro

"Kingsley Akhimien" <d_worldsgreatest@hotmail.com> a scris în mesaj
news:3087980D-265B-480A-B02B-371A88AAF494@microsoft.com...
> Hi Adrei,
>
> Thanks for your post, it answered some questions. Another question I'm
> having is when I migrate to a new forest will I also need to migrate my
> child domain to the new forest or will it automatically recognized the
> "old child domain". I need to know this because I have about 650 user
> accounts in my child domain, so I want to know what options do I have?
>
> Kingsley
>
>
> "Andrei Ungureanu" <itboard.ro> wrote in message
> news:%23$BmOt6DKHA.4220@TK2MSFTNGP02.phx.gbl...
>>I can confirm this.
>> It's possible create domain trusts with domains in another forests
>> without the forest root domain.
>> Problems begins if you will need access to Enterprise & Schema Admins
>> groups.
>> So, my advice in case PSS will not be able to solve this issue, is to do
>> a migration to a new forest.
>>
>> PS: you child domain will continue working without the forest root for an
>> unlimited period of time (probably); but eventually you will need
>> something from the forest root.
>>
>> Regards,
>> Andrei Ungureanu
>> www.itboard.ro
>>
>> "Marcin" <marcin@community.nospam> a scris în mesaj
>> news:OoBPj04DKHA.5092@TK2MSFTNGP03.phx.gbl...
>>> Paul,
>>> as far as I understand, it still should be possible to create
>>> domain-level trusts..
>>>
>>> best regards,
>>> Marcin
>>>
>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>> news:%23u95cF4DKHA.4608@TK2MSFTNGP02.phx.gbl...
>>>> Marcin,
>>>> Will he be able to establish a trust without the forest root?
>>>>
>>>> --
>>>> Paul Bergson
>>>> MVP - Directory Services
>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>
>>>> http://www.pbbergs.com
>>>>
>>>> Please no e-mails, any questions should be posted in the NewsGroup This
>>>> posting is provided "AS IS" with no warranties, and confers no rights.
>>>>
>>>> "Marcin" <marcin@community.nospam> wrote in message
>>>> news:uj8mqC4DKHA.1540@TK2MSFTNGP02.phx.gbl...
>>>>> Root domain is essential to the functioning of entire forest - so
>>>>> reinstalling the DC is not the option here. For implications, refer to
>>>>> http://blogs.technet.com/instan/arch...rest-root.aspx
>>>>>
>>>>> Without a valid backup, your options are limited (I assume you already
>>>>> tried http://support.microsoft.com/kb/258062 - correct?). Besides
>>>>> learning a valuable lesson first-hand, you could also try promoting
>>>>> another DC in the same domain, although I doubt that this will be
>>>>> successful. Ultimately, you might need to look into migration of your
>>>>> forest...
>>>>>
>>>>> hth
>>>>> Marcin
>>>>>
>>>>> "Kingsley Akhimien" <d_worldsgreatest@hotmail.com> wrote in message
>>>>> news:E427F8A4-C451-4A88-8B45-462AC7D9883D@microsoft.com...
>>>>>>I have problem with my AD forest domain. The AD database of my
>>>>>>forest/root domain server is corrupted and I don't have a system state
>>>>>>backup of the forest/root server. I know the AD database is corrupted
>>>>>>because when I boot
>>>>>> up the server normally it gets to a point saying "rebuilding Active
>>>>>> Directory indices..." but it fails to complete the AD rebuilding. It
>>>>>> then displays an error message saying "Directory Service cannot
>>>>>> start.....", it then suggest that I should try starting the server in
>>>>>> Active Directory Restore Mode.
>>>>>> I am able to start the forest /root server in AD restore mode and
>>>>>> tried all the database recovery steps and commands from TechNet but
>>>>>> still can't fix the problem. I know my last option is to reinstall
>>>>>> the server since I don't
>>>>>> have a system state backup for the restore process. But am scared to
>>>>>> do this because I don't want to lose my child domain servers
>>>>>> functionalities and connections to the forest domain. My child domain
>>>>>> servers are responsible
>>>>>> for authentication of all computer and user accounts on the network.
>>>>>> All users on the domain still can logon to the domain and carry out
>>>>>> domain tasks even with the forest domain server offline.
>>>>>>
>>>>>> My question is if I reinstall the forest domain server, will I lose
>>>>>> the connection and functionality of my child domain server which is
>>>>>> working "fine" presently. Secondly, will domain applications that
>>>>>> depends on some functionalities of the schema and domain naming
>>>>>> master roles (held present by my faulty forest/root server) continue
>>>>>> to function properly. Thirdly, is there any way I can repair the
>>>>>> server without reinstalling.
>>>>>>
>>>>>> My AD domain/server setup is as follows:
>>>>>> - Forest/Parent Domain: DC1.rootdomainname.com
>>>>>> - Child Domain: DC1.childdomainname.rootdomainname.com &
>>>>>> DC2.childdomainname.rootdomainname.com
>>>>>>
>>>>>> Please any help will be appreciated.
>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>

Hi Guys, forget to mention this earlier. I noticed that I can no longer use
OWA to access corporate emails running Exchange 2003. But users can still
use Outlook or MAPI client to both send and receive emails. Does this have
any connection with my corrupted AD forest root server? I need to figure
this out quickly........Any idea?

Kingsley.


"Marcin" <marcin@community.nospam> wrote in message
news:uj8mqC4DKHA.1540@TK2MSFTNGP02.phx.gbl...
> Root domain is essential to the functioning of entire forest - so
> reinstalling the DC is not the option here. For implications, refer to
> http://blogs.technet.com/instan/arch...rest-root.aspx
>
> Without a valid backup, your options are limited (I assume you already
> tried http://support.microsoft.com/kb/258062 - correct?). Besides learning
> a valuable lesson first-hand, you could also try promoting another DC in
> the same domain, although I doubt that this will be successful.
> Ultimately, you might need to look into migration of your forest...
>
> hth
> Marcin
>
> "Kingsley Akhimien" <d_worldsgreatest@hotmail.com> wrote in message
> news:E427F8A4-C451-4A88-8B45-462AC7D9883D@microsoft.com...
>>I have problem with my AD forest domain. The AD database of my forest/root
>>domain server is corrupted and I don't have a system state backup of the
>>forest/root server. I know the AD database is corrupted because when I
>>boot
>> up the server normally it gets to a point saying "rebuilding Active
>> Directory indices..." but it fails to complete the AD rebuilding. It then
>> displays an error message saying "Directory Service cannot start.....",
>> it then suggest that I should try starting the server in Active Directory
>> Restore Mode.
>> I am able to start the forest /root server in AD restore mode and tried
>> all the database recovery steps and commands from TechNet but still can't
>> fix the problem. I know my last option is to reinstall the server since I
>> don't
>> have a system state backup for the restore process. But am scared to do
>> this because I don't want to lose my child domain servers
>> functionalities and connections to the forest domain. My child domain
>> servers are responsible
>> for authentication of all computer and user accounts on the network. All
>> users on the domain still can logon to the domain and carry out domain
>> tasks even with the forest domain server offline.
>>
>> My question is if I reinstall the forest domain server, will I lose the
>> connection and functionality of my child domain server which is working
>> "fine" presently. Secondly, will domain applications that depends on some
>> functionalities of the schema and domain naming master roles (held
>> present by my faulty forest/root server) continue to function properly.
>> Thirdly, is there any way I can repair the server without reinstalling.
>>
>> My AD domain/server setup is as follows:
>> - Forest/Parent Domain: DC1.rootdomainname.com
>> - Child Domain: DC1.childdomainname.rootdomainname.com &
>> DC2.childdomainname.rootdomainname.com
>>
>> Please any help will be appreciated.
>>
>>
>>
>
>

Hi
Have a look at:
http://eniackb.blogspot.com/2009/06/...-database.html
Check scenario 3.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"Kingsley Akhimien" <d_worldsgreatest@hotmail.com> wrote in message
news:E427F8A4-C451-4A88-8B45-462AC7D9883D@microsoft.com...
>I have problem with my AD forest domain. The AD database of my forest/root
>domain server is corrupted and I don't have a system state backup of the
>forest/root server. I know the AD database is corrupted because when I boot
> up the server normally it gets to a point saying "rebuilding Active
> Directory indices..." but it fails to complete the AD rebuilding. It then
> displays an error message saying "Directory Service cannot start.....", it
> then suggest that I should try starting the server in Active Directory
> Restore Mode.
> I am able to start the forest /root server in AD restore mode and tried
> all the database recovery steps and commands from TechNet but still can't
> fix the problem. I know my last option is to reinstall the server since I
> don't
> have a system state backup for the restore process. But am scared to do
> this because I don't want to lose my child domain servers functionalities
> and connections to the forest domain. My child domain servers are
> responsible
> for authentication of all computer and user accounts on the network. All
> users on the domain still can logon to the domain and carry out domain
> tasks even with the forest domain server offline.
>
> My question is if I reinstall the forest domain server, will I lose the
> connection and functionality of my child domain server which is working
> "fine" presently. Secondly, will domain applications that depends on some
> functionalities of the schema and domain naming master roles (held present
> by my faulty forest/root server) continue to function properly. Thirdly,
> is there any way I can repair the server without reinstalling.
>
> My AD domain/server setup is as follows:
> - Forest/Parent Domain: DC1.rootdomainname.com
> - Child Domain: DC1.childdomainname.rootdomainname.com &
> DC2.childdomainname.rootdomainname.com
>
> Please any help will be appreciated.
>
>
>

Hello Kingsley,

Without a backup form the root and no ability to get in normally call MS
PSS for support. Maybe they can help you.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello Meinolf,
>
> I can't logon to the server after the error message, it just reboot
> automatically. But i can logon to Directory Services Restore Mode. Am
> in a big mess......and am scared of loosing my entire domain. I have
> over 650 user accounts that reply on the domain for their daily job. I
> also have Exchange 2003 and ISA 2004 on the domain. I'm really scared.
>
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
> news:ff16fb662b2e08cbdda7c47ca726@msnews.microsoft.com...
>
>> Hello Kingsley,
>>
>> If you don't have a backup and the you don't have an additional DC in
>> the
>> root you are lost if the server is ont to repair. Which event viewer
>> errors do you have in Directory Services event? Are you able to logon
>> after the error message or does it directly reboot?
>> Best regards
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I have problem with my AD forest domain. The AD database of my
>>> forest/root
>>> domain server is corrupted and I don't have a system state backup of
>>> the
>>> forest/root server. I know the AD database is corrupted because when
>>> I
>>> boot
>>> up the server normally it gets to a point saying "rebuilding Active
>>> Directory indices..." but it fails to complete the AD rebuilding. It
>>> then
>>> displays an error message saying "Directory Service cannot
>>> start.....", it
>>> then suggest that I should try starting the server in Active
>>> Directory
>>> Restore Mode.
>>> I am able to start the forest /root server in AD restore mode and
>>> tried all
>>> the database recovery steps and commands from TechNet but still
>>> can't
>>> fix
>>> the problem. I know my last option is to reinstall the server since
>>> I
>>> don't
>>> have a system state backup for the restore process. But am scared to
>>> do this
>>> because I don't want to lose my child domain servers
>>> functionalities
>>> and
>>> connections to the forest domain. My child domain servers are
>>> responsible
>>> for authentication of all computer and user accounts on the network.
>>> All
>>> users on the domain still can logon to the domain and carry out
>>> domain
>>> tasks
>>> even with the forest domain server offline.
>>> My question is if I reinstall the forest domain server, will I lose
>>> the connection and functionality of my child domain server which is
>>> working "fine" presently. Secondly, will domain applications that
>>> depends on some functionalities of the schema and domain naming
>>> master
>>> roles (held present by my faulty forest/root server) continue to
>>> function properly. Thirdly, is there any way I can repair the server
>>> without reinstalling.
>>> My AD domain/server setup is as follows:
>>> - Forest/Parent Domain: DC1.rootdomainname.com
>>> - Child Domain: DC1.childdomainname.rootdomainname.com &
>>> DC2.childdomainname.rootdomainname.com
>>> Please any help will be appreciated.

Hello Kingsley,

Migrating to a new domain in a new forest is not that simple. It requires
if really needed a new root domain and then you have to migrate the child
domain into it. Another point is that you can not use the complete same domain
names for the new child as the old child. So child.domain.com from the old
forest can not be migrated to child.domain.com in the new forest.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi Adrei,
>
> Thanks for your post, it answered some questions. Another question I'm
> having is when I migrate to a new forest will I also need to migrate
> my child domain to the new forest or will it automatically recognized
> the "old child domain". I need to know this because I have about 650
> user accounts in my child domain, so I want to know what options do I
> have?
>
> Kingsley
>
> "Andrei Ungureanu" <itboard.ro> wrote in message
> news:%23$BmOt6DKHA.4220@TK2MSFTNGP02.phx.gbl...
>
>> I can confirm this.
>> It's possible create domain trusts with domains in another forests
>> without
>> the forest root domain.
>> Problems begins if you will need access to Enterprise & Schema Admins
>> groups.
>> So, my advice in case PSS will not be able to solve this issue, is to
>> do a
>> migration to a new forest.
>> PS: you child domain will continue working without the forest root
>> for an unlimited period of time (probably); but eventually you will
>> need something from the forest root.
>>
>> Regards,
>> Andrei Ungureanu
>> www.itboard.ro
>> "Marcin" <marcin@community.nospam> a scris în mesaj
>> news:OoBPj04DKHA.5092@TK2MSFTNGP03.phx.gbl...
>>
>>> Paul,
>>> as far as I understand, it still should be possible to create
>>> domain-level trusts..
>>> best regards,
>>> Marcin
>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>> news:%23u95cF4DKHA.4608@TK2MSFTNGP02.phx.gbl...
>>>
>>>> Marcin,
>>>> Will he be able to establish a trust without the forest root?
>>>> --
>>>> Paul Bergson
>>>> MVP - Directory Services
>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>> http://www.pbbergs.com
>>>>
>>>> Please no e-mails, any questions should be posted in the NewsGroup
>>>> This posting is provided "AS IS" with no warranties, and confers no
>>>> rights.
>>>>
>>>> "Marcin" <marcin@community.nospam> wrote in message
>>>> news:uj8mqC4DKHA.1540@TK2MSFTNGP02.phx.gbl...
>>>>
>>>>> Root domain is essential to the functioning of entire forest - so
>>>>> reinstalling the DC is not the option here. For implications,
>>>>> refer to
>>>>> http://blogs.technet.com/instan/arch...ude-where-s-my
>>>>> -forest-root.aspx
>>>>>
>>>>> Without a valid backup, your options are limited (I assume you
>>>>> already tried http://support.microsoft.com/kb/258062 - correct?).
>>>>> Besides learning a valuable lesson first-hand, you could also try
>>>>> promoting another DC in the same domain, although I doubt that
>>>>> this will be successful. Ultimately, you might need to look into
>>>>> migration of your forest...
>>>>>
>>>>> hth
>>>>> Marcin
>>>>> "Kingsley Akhimien" <d_worldsgreatest@hotmail.com> wrote in
>>>>> message news:E427F8A4-C451-4A88-8B45-462AC7D9883D@microsoft.com...
>>>>>
>>>>>> I have problem with my AD forest domain. The AD database of my
>>>>>> forest/root domain server is corrupted and I don't have a system
>>>>>> state
>>>>>> backup of the forest/root server. I know the AD database is
>>>>>> corrupted
>>>>>> because when I boot
>>>>>> up the server normally it gets to a point saying "rebuilding
>>>>>> Active
>>>>>> Directory indices..." but it fails to complete the AD rebuilding.
>>>>>> It
>>>>>> then displays an error message saying "Directory Service cannot
>>>>>> start.....", it then suggest that I should try starting the
>>>>>> server in
>>>>>> Active Directory Restore Mode.
>>>>>> I am able to start the forest /root server in AD restore mode and
>>>>>> tried all the database recovery steps and commands from TechNet
>>>>>> but
>>>>>> still can't fix the problem. I know my last option is to
>>>>>> reinstall the
>>>>>> server since I don't
>>>>>> have a system state backup for the restore process. But am scared
>>>>>> to
>>>>>> do this because I don't want to lose my child domain servers
>>>>>> functionalities and connections to the forest domain. My child
>>>>>> domain
>>>>>> servers are responsible
>>>>>> for authentication of all computer and user accounts on the
>>>>>> network.
>>>>>> All users on the domain still can logon to the domain and carry
>>>>>> out
>>>>>> domain tasks even with the forest domain server offline.
>>>>>> My question is if I reinstall the forest domain server, will I
>>>>>> lose the connection and functionality of my child domain server
>>>>>> which is working "fine" presently. Secondly, will domain
>>>>>> applications that depends on some functionalities of the schema
>>>>>> and domain naming master roles (held present by my faulty
>>>>>> forest/root server) continue to function properly. Thirdly, is
>>>>>> there any way I can repair the server without reinstalling.
>>>>>>
>>>>>> My AD domain/server setup is as follows:
>>>>>> - Forest/Parent Domain: DC1.rootdomainname.com
>>>>>> - Child Domain: DC1.childdomainname.rootdomainname.com &
>>>>>> DC2.childdomainname.rootdomainname.com
>>>>>> Please any help will be appreciated.
>>>>>>

Did you check link provided?

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"Kingsley Akhimien" <d_worldsgreatest@DELETETHIS.hotmail.com> wrote in
message news:OQKHVHPEKHA.1252@TK2MSFTNGP04.phx.gbl...
> Hi Guys, forget to mention this earlier. I noticed that I can no longer
> use OWA to access corporate emails running Exchange 2003. But users can
> still use Outlook or MAPI client to both send and receive emails. Does
> this have any connection with my corrupted AD forest root server? I need
> to figure this out quickly........Any idea?
>
> Kingsley.
>
>
> "Marcin" <marcin@community.nospam> wrote in message
> news:uj8mqC4DKHA.1540@TK2MSFTNGP02.phx.gbl...
>> Root domain is essential to the functioning of entire forest - so
>> reinstalling the DC is not the option here. For implications, refer to
>> http://blogs.technet.com/instan/arch...rest-root.aspx
>>
>> Without a valid backup, your options are limited (I assume you already
>> tried http://support.microsoft.com/kb/258062 - correct?). Besides
>> learning a valuable lesson first-hand, you could also try promoting
>> another DC in the same domain, although I doubt that this will be
>> successful. Ultimately, you might need to look into migration of your
>> forest...
>>
>> hth
>> Marcin
>>
>> "Kingsley Akhimien" <d_worldsgreatest@hotmail.com> wrote in message
>> news:E427F8A4-C451-4A88-8B45-462AC7D9883D@microsoft.com...
>>>I have problem with my AD forest domain. The AD database of my
>>>forest/root domain server is corrupted and I don't have a system state
>>>backup of the forest/root server. I know the AD database is corrupted
>>>because when I boot
>>> up the server normally it gets to a point saying "rebuilding Active
>>> Directory indices..." but it fails to complete the AD rebuilding. It
>>> then displays an error message saying "Directory Service cannot
>>> start.....", it then suggest that I should try starting the server in
>>> Active Directory Restore Mode.
>>> I am able to start the forest /root server in AD restore mode and tried
>>> all the database recovery steps and commands from TechNet but still
>>> can't fix the problem. I know my last option is to reinstall the server
>>> since I don't
>>> have a system state backup for the restore process. But am scared to do
>>> this because I don't want to lose my child domain servers
>>> functionalities and connections to the forest domain. My child domain
>>> servers are responsible
>>> for authentication of all computer and user accounts on the network. All
>>> users on the domain still can logon to the domain and carry out domain
>>> tasks even with the forest domain server offline.
>>>
>>> My question is if I reinstall the forest domain server, will I lose the
>>> connection and functionality of my child domain server which is working
>>> "fine" presently. Secondly, will domain applications that depends on
>>> some functionalities of the schema and domain naming master roles (held
>>> present by my faulty forest/root server) continue to function properly.
>>> Thirdly, is there any way I can repair the server without reinstalling.
>>>
>>> My AD domain/server setup is as follows:
>>> - Forest/Parent Domain: DC1.rootdomainname.com
>>> - Child Domain: DC1.childdomainname.rootdomainname.com &
>>> DC2.childdomainname.rootdomainname.com
>>>
>>> Please any help will be appreciated.
>>>
>>>
>>>
>>
>>
>