This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 4%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM1%3C/text%3E%3C/svg%3E)
I have a domain that I can't remove. It's not a child-domain of our primary domain, it's separate... possibly a trusted domain which no longer exists. Under AD domains and trusts, it is listed as:
domainB is no longer needed, and its domain controllers are no longer on the network.
I can't find a way to remove it from our system. It doesn't show under incoming or outgoing trusts.
The DCs in domainA log events about not being able to find writeable sources for this domain/partition.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(176, 16%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHX%3C/text%3E%3C/svg%3E)
Hello @Mark-1873 ,
Would you mind telling us the current situation? Please let us know if you would like further assistance. Thanks.
Best regards,
Hannah Xiong
Hello @Mark-1873 ,
I am checking how the issue is going, if you still have any questions, please feel free to contact us.
Thank you so much for your time and support.
Best regards,
Hannah Xiong
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
I'd work through this one to clean it up.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/remove-orphaned-domains
--please don't forget to Accept as answer if the reply is helpful--
I've seen that article. It applies to child domains. When I follow those instructions, it gives me an error:
DsRemoveDsDomainW error 0x2015(The directory service can perform the requested operation only on a leaf object.)
Maybe this one.
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/bb727062(v=technet.10)#remove-a-manually-created-trust
also look for references here.
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-metadata-cleanup
https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-manually-removing-a-domain-controller-server/ba-p/280564
--please don't forget to Accept as answer if the reply is helpful--
The trusts do not exist under AD Domains and Trust mmc, nor via netdom command. And there are no DCs for that domain to manually remove or clean up.
Maybe this one helps.
https://johnhowto.wordpress.com/2015/02/16/ms-metadata-cleanup-error-the-directory-service-can-perform-the-requested-operation-only-on-a-leaf-object/
--please don't forget to Accept as answer if the reply is helpful--
Unfortunately this also seems to apply to child domains only. I get the same error as with metadata cleanup:
ldap_delete_ext_sW error 0x42(66 (Not allowed on Non-leaf).
Ldap extended error message is 00002015: UpdErr: DSID-03100E01, problem 6003 (CANT_ON_NON_LEAF), data 0
Win32 error returned is 0x2015(The directory service can perform the requested operation only on a leaf object.)
)
Where specifically do you see the problem? What operating systems are involved?
AD Domains and Trusts. I want to delete the bottom domain.
Primary domain is functional level 2008 R2. DCs are 2016 & 2019.
Domain to be removed is unknown version. Since no DCs exist, I can't pull info on it.
We've covered all the bases here so something else may be broken. This tool may give you clues where the orphaned object is.
https://learn.microsoft.com/en-us/sysinternals/downloads/adexplorer
then may need adsiedit to do more cleanup.
I'd suggest starting a case here with product support.
https://support.serviceshub.microsoft.com/supportforbusiness
--please don't forget to Accept as answer if the reply is helpful--