Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a problem deleting an orphaned subdomain from a Windows Server 2008 R2 AD. The situation is as follows:

  1. dcpromo failed in demoting the only DC of the subdomain. The DC was therefore demoted forcefully.
  2. No DC for the subdomain is in the AD at the moment (as shown in GUI).
  3. If I use ntdsutil and connect to the sub domain, it says that there is no site, no server and no naming context for the domain.
  4. The subdomain shows in AD domains and trusts, but I cannot do anything, because it cannot find a DC for the subdomain.

If I call "remove selected domain" for the subdomain, the tool asks for confirmations but then fails with error 0x2162, i. e. it tells me that there are still DCs left for the subdomain. However, I cannot delete any DCs or naming contexts using ntdsutil, because it does not show any.

Any suggestions on removing the domain are welcome.

share|improve this question

Surely this is not the best approach but look for the orphaned DC in AD Sites and Services. If you find it there then delete it's NTDS Settings component, then delete the server, then delete the Site and Subnet for the orphaned domain (if the site and subnet is not valid for the remaining parent domain), then delete the domain from AD Domains and Trusts. You'll wind up with some DNS cleanup to do more than likely and may need to do some cleanup with ADSIEdit as well.

share|improve this answer
Unfortunately, the server of the subdomain is not in AD Sites and Services. I can only find the two DCs of our primary domain. – Christoph Oct 28 '10 at 12:22
Btw, i cannot find the subdomain in the DNS settings any more, it is just in the AD domains and trusts. – Christoph Oct 28 '10 at 12:37
up vote 1 down vote accepted

I found the solution at There was an old entry in CN=LostAndFoundConfig,CN=Configuration,... containing references to the subdomain. After removing this, I could remove the subdomain from AD domains and trusts.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.