Rebuilding crashed Domain Controller - is it worth it?

AndreySgo 1 Reputation point
2020-11-21T15:31:53.957+00:00

Hi all, we recently had a 6-hour long power outage at one of our sites due to inclement weather and the domain controller got corrupted. When it came back on-line the DNS got corrupted, some of the OUs were also missing. It happened at a site that only has a single DC and some security appliances and no backups. As a quick workaround we configured DHCP to use DNS from another site.

Do you think it would be worth trying demoting the DC during maintenance window, removing from domain, joining to domain, promoting as DC, importing DHCP and forcing replication or just building a new DC from scratch? What would be recommended steps for rebuilding a corrupted DC?

Thank you!

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,826 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Dave Patrick 426K Reputation points MVP
    2020-11-21T16:35:13.163+00:00

    I probably would not spend much time with it.

    If necessary you can perform cleanup.
    https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-metadata-cleanup
    https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-manually-removing-a-domain-controller-server/ba-p/280564

    Then rebuild it. I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new one, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health.

    --please don't forget to Accept as answer if the reply is helpful--

    1 person found this answer helpful.