nltest /dclist and nltest /dnsgetdc showing different results

Question

Different results showing when one queries for the list of domain controllers.

These commands do not return the ghost DCs(Recently demoted DC):

1. nltest /dclist:DomainFQDNHere
2. Get-ADDomainController -Filter * | select name,operatingsystem,HostName,site,IsGlobalCatalog,IsReadOnly,IPv4Address
3. netdom query dc

The commands below do return the ghost DCs(Recently demoted DC):

nltest /dnsgetdc:DomainFQDNHere

Answer 1

Hello @RawatP ,

Thank you for your update.

According to our experience, we encountered such a situation (can not delete SRV records or delete SRV records, then will appear again) on the domain controller of 2012 R2.

1.What is the version of the operating system of your DC that we perform the deletion operation? Is it a 2012 R2 DC?
2.How many DCs in your domain?
3.What are the version of the operating system of all DCs in your domain?

If you have multiple DCs with different OS versions in this domain (such as 2012, 2012 R2 and 2016 or 2019), we can try to delete these SRV records for this demoted server on other DCs except 2012 R2 DC, if we can delete these SRV records for this demoted server on other DCs and AD replication works fine, the deletion changes will be updated on all DCs in the domain.

Hope the information above is helpful. If anything is unclear, please feel free to let us know.

Best Regards,
Daisy Zhou

Answer 2

@Anonymous
yes, removed DC used to be one DC ( also one DNS server), however now we removed the AD DS and demoted it as a member server, then we use this member server with the same host name and IP address as your terminal licensing server.

I just have tried to remove all SRV records manually, but it automatically came back .
No CNAME record found for the server

Answer 3

Hello @RawatP ,

Thank you for your update.

If you delete these records and refresh the DNS manager interface, they will appear immediately?

Or is it that these records were re-registered after 5-30 minutes?

If these records were re-registered after several minutes, it seems that the demoted DC is not uninstalled cleanly.

1.Can you find the demoted server object from the sites in Active Directory Sites and Services, expand the appropriate site and delete the server object associated with the failed domain controller.

2.Can you find the demoted server object from the Domain Controllers container in Active Directory Users and Computers, expand the domain controllers container and delete the computer object associated with the failed domain controller.

3.Can you see the demoted server object after running the following commands?

repadmin /replsum

repadmin /showrepl /csv >showrepl.csv

Best Regards,
Daisy Zhou