rendom /end failed to delete rename script

Leo Salas 1 Reputation point
2022-08-26T12:39:42.387+00:00

So our primary DC (hosted on a server running Server 2008 R2) has failed in the middle of renaming the DC.
However, it looks like all the FSMO roles, DNS, and other roles have successfully completed and we are operational under the new domain name on a 2nd server (Server2012 R2).

When attempting to run the command rendom /end command, I get the following error:

Failed to delete rename script on the the DN: CN=Partitions,CN=Configuration,DC=newdomainname,DC=com on host server2012r2.newdomainname.com,
00002077: SvcErr: DSID-030F114D, problem 5003 (WILL_NOT_PERFORM), DATA 0: Cannot complete this function. :1003.

PS C:\Windows\system32> netdom query fsmo
Schema master server2012r2.newdomainname.com
Domain naming master server2012r2.newdomainname.com
PDC server2012r2.newdomainname.com
RID pool manager server2012r2.newdomainname.com
Infrastructure master server2012r2.newdomainname.com
The command completed successfully.

I've been through several help posts but none seem to address the issue i am having..

Thank you for your consideration and help in advance on this.
I need to compele the rendom process to add a 2nd DC for redundancy.

Windows Server 2012
Windows Server 2012
A Microsoft server operating system that supports enterprise-level management, data storage, applications, and communications.
1,525 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,814 questions
{count} votes

9 answers

Sort by: Most helpful
  1. Dave Patrick 426K Reputation points MVP
    2022-08-26T12:47:59.487+00:00

    The safer thing to do may be to take the failed one offline, move or seize roles off to another healthy one
    https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/transfer-or-seize-fsmo-roles-in-ad-ds

    Perform some cleanup
    https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-metadata-cleanup
    https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-manually-removing-a-domain-controller-server/ba-p/280564

    and stand up a new one for replacement.

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  2. Leo Salas 1 Reputation point
    2022-10-20T13:53:38.163+00:00

    My 'server2012r2' which is the newest DC and is not letting me use rendom /end successfully is still exhibiting the same symptoms.

    When in the Active Directory Users and Computers under Domain Controllers I can right-click SERVER2008 (the one that has failed), and Delete. I am asked if I am sure I want to do that and I select Yes. From there, on the next window I have to checkmark the "Delete this Domain Controller anyways." option. and then select Delete. From there I get another window telling me the server is a Global Catalog and again do i want to do this. I select yes. The next windows answer with the following message:

    Windows cannot delete object (server2008)
    LDAP://server2012r2.blossomaerospace.com/CN=SERVER2008,OU=Domain Controllers, DC=blossomaerospace,DC=com because:
    The Directory Service cannot perform the requested operation because a domain rename operation is in progress.

    I am stumped at this point.

    Appreciate your assistance.

    0 comments No comments

  3. Dave Patrick 426K Reputation points MVP
    2022-10-20T14:03:37.667+00:00

    Are you renaming the domain or a just trying to rename a domain controller. Assuming the latter the simpler / safer thing to do may be to take the failed one offline, move or seize roles off to another healthy one
    https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/transfer-or-seize-fsmo-roles-in-ad-ds

    Perform some cleanup
    https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-metadata-cleanup
    https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-manually-removing-a-domain-controller-server/ba-p/280564

    and stand up a new one for replacement with the desired name.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    0 comments No comments

  4. Leo Salas 1 Reputation point
    2022-10-20T14:06:40.177+00:00

    It was a rename domain on server2012r2.

    0 comments No comments

  5. Dave Patrick 426K Reputation points MVP
    2022-10-20T14:22:06.723+00:00

    Ok, I wondered because at first you mentioned "failed in the middle of renaming the DC"

    As to the delete operation of the 2008 domain controller you could remove it from the network, do the seize / cleanup I mentioned above but difficult to say in the current state.

    Renaming a domain is always a very risky operation. If the above doesn't work for some reason you may need to restore a recent known good backup, confirm the health is 100% then try again.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    0 comments No comments