Short version: one of our domain controllers has DFSR Event 5008 errors, regarding a domain controller that has be demoted and removed from our domain. It is the only domain controller, of five, to have this error, the other four domain controllers are clean.

Longer version: we are in the process of upgrading Active Directory from 2008 to 2012 R2, at this time we have three 2012 R2 servers and one of those three owns all the FSMO roles, it also happens to be the one that we see the DFSR Event 5008 errors on. In addition to those three 2012 R2 servers, we have two 2008 servers remaining, until we clear up the remaining errors.

DFS Replication, on DC-2012-1, says that it failed to communicate to partner DC-2008-2; however, that is to be expected since DC-2008-2 is no longer a domain controller, nor a member of the domain. When we go into DFS Management and look at the sysvol replication, we do not see DC-2008-2 referenced anywhere, nor have I found a reference to it anywhere else that I have looked.

What can we do remove the reference to the partner, to eliminate these errors?

Hi,

I suggest you try to perform a server metadata cleanup to see if it works.

More information for you:

Clean Up Server Metadata

http://technet.microsoft.com/en-us/library/cc816907(v=WS.10).aspx

Best Regards,

Amy Wang

Hi Amy,

Thank you for responding!

There are no references to the old server, DC-2008-2, within the metadata. I have looked in ADUC, ADSS, and gone through the steps of metadata cleanup with NTDSUtil ... neither of those lists the old server.

Nate

Anyone have a known resolution?

Hi Nate,

Have you tried to create a new replication group?

More information for you:

Create a replication group

http://technet.microsoft.com/en-us/library/cc756710(v=WS.10).aspx

DFS Step-by-Step Guide for Windows Server 2008

http://technet.microsoft.com/en-us/library/cc732863(v=WS.10).aspx

Best Regards,

Amy

• Edited by Amy Wang_Microsoft contingent staff, Moderator Thursday, February 27, 2014 7:26 AM

Hi Nate,

Have you tried to create a new replication group?

More information for you:

Create a replication group

http://technet.microsoft.com/en-us/library/cc756710(v=WS.10).aspx

DFS Step-by-Step Guide for Windows Server 2008

http://technet.microsoft.com/en-us/library/cc732863(v=WS.10).aspx

Best Regards,

Amy

• Edited by Amy Wang_Microsoft contingent staff, Moderator Thursday, February 27, 2014 7:26 AM

Hi Amy,

This is the Domain System DFSR we are talking about. Is it something that can be deleted and re-created without causing issues?

Nate

Check old Replication group partner in ADSIEDIT and remove it.

Note: Be cautious while working in ADSIEDIT.

Do you mean look for the removed server in ADSIEDIT and delete it? If so, we have already verified that the server does not exist in ADSIEDIT.

If you mean look at the replication partners in ADSIEDIT, under the DFSR-GlobalSettings, would you please provide me with steps or a location to go to, in order to find the reference to the old server?

Hi,

Please have a look at this thread to see if it helps:

DFS - Clean Old DFS Replication Groups

http://social.technet.microsoft.com/forums/windowsserver/en-US/a7724837-b80a-436b-89df-97bb189bcecc/dfs-clean-old-dfs-replication-groups

Regards,

Amy

Hi 

Did you ever get a satisfactory answer to this? I appear to be in the same boat. DFSR is trying to replicate with an old DC that was demoted and removed months ago. There is no record of this old DC in ADSIEDIT, ADUC or anywhere I think of looking. 

Hi,

I will say please try this link from MS and revert back

https://support.microsoft.com/en-us/kb/967336

hi,

Any updates on above?

Using LDP (or ADSIEDIT), simply deleted the reference to the missing DC from within (my example here): CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=MYDOMAIN,DC=COM

If you check that (deleted) DC in this container, you will notice that it is, in fact, missing the serverReference attribute; showing the DC has gone from your environment. Checking other active DCs will show the serverReference pointing to their location in the Configuration Partition.

As soon as you delete the old DC, check the DFSR Management console on a DC and you'll see that the old, deprecated DC has also been removed from the Domain System Volume Replication topology.

Hope this helps,

Scott.