Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Note: the problem has been resolved, the admin of the parent domain managed to remove the DC object. I gather he used ADSIEdit.

I'm working with an AD forest (in an isolated test environment, luckily, so failing all else we can blow everything away) and accidentally tried to create a subdomain using a cloned machine as the new domain controller.

Naturally enough, this didn't work. But the new subdomain got created, even though AD was not successfully installed on the putative DC, and now I can't get rid of it.

I started with this article. That didn't work because there was still metadata for the DC for the orphaned domain.

So I found this. Unfortunately this doesn't work either.

I opened AD Site and Services, opened the site in question, opened the Servers container, selected the DC in question, right-clicked on NTDS Settings and selected Delete. Clicked through "Are you sure", selected "This Domain Controller is permanently offline ...", confirmed that I wanted to do this even though the DC isn't in the domain I'm connected to, and confirmed that I wanted to do this even though this was the last DC in the domain.

Then it said "Windows cannot delete object LDAP://... because: A referral was returned from the server."

Anyone seen this before? Any ideas?

share|improve this question
Please post your resolution as an answer to this and mark it as accepted so that this question doesn't hang around in the "unanswered" list. It's encouraged to answer your own questions this way. – MDMarra Jul 3 '12 at 13:39
@MDMarra: unfortunately I didn't solve the problem myself, and I didn't get a sufficiently detailed explanation of how it was resolved. We could delete it instead if you like? – Harry Johnston Jul 3 '12 at 20:41
Even what you wrote as an edit will suffice. It's better than leaving this question open-ended for eternity. – MDMarra Jul 3 '12 at 22:49
up vote 3 down vote accepted

The administrator of the parent domain removed the DC object the next day using ADSIEdit. I was then able to remove the orphaned domain as described in KB230306.

I believe that part of the problem was that not all of the information had fully replicated, perhaps due to some odd issues with DNS in the isolated environment. It is possible that, had I waited overnight, the procedure I originally tried (described in the question) would have worked.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.