Monday, December 28, 2009

How to Remove Failed DC object from ADS

At the command line, type Ntdsutil and press ENTER.
C:\WINDOWS>ntdsutil
ntdsutil:

1. At the Ntdsutil: prompt, type metadata cleanup and press Enter.
ntdsutil: metadata cleanup
metadata cleanup:

2. At the metadata cleanup: prompt, type connections and press Enter.
metadata cleanup: connections
server connections:

3. At the server connections: prompt, type connect to server , where is the domain controller (any functional domain controller in the same domain) from which you plan to clean up the metadata of the failed domain controller. Press Enter.
server connections: connect to server server100
Binding to server100 ...
Connected to server100 using credentials of locally logged on user.
server connections:

Note: Windows Server 2003 Service Pack 1 eliminates the need for the above step.
4. Types quit and press Enter to return you to the metadata cleanup: prompt.
server connections: q
metadata cleanup:

5. Type select operation target and press Enter.
metadata cleanup: Select operation target
select operation target:

6. Type list domains and press Enter. This lists all domains in the forest with a number associated with each.
select operation target: list domains
Found 1 domain(s)
0 - DC=dpetri,DC=net
select operation target:

7. Type select domain , where is the number corresponding to the domain in which the failed server was located. Press Enter.
select operation target: Select domain 0
No current site
Domain - DC=dpetri,DC=net
No current server
No current Naming Context
select operation target:
8. Type list sites and press Enter.
select operation target: List sites
Found 1 site(s)
0 - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net
select operation target:
9. Type select site , where refers to the number of the site in which the domain controller was a member. Press Enter.
select operation target: Select site 0
Site - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net
Domain - DC=dpetri,DC=net
No current server
No current Naming Context
select operation target:
10. Type list servers in site and press Enter. This will list all servers in that site with a corresponding number.
select operation target: List servers in site
Found 2 server(s)
0 - CN=SERVER200,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net
1 - CN=SERVER100,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net
select operation target:
11. Type select server and press Enter, where refers to the domain controller to be removed.
select operation target: Select server 0
Site - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net
Domain - DC=dpetri,DC=net
Server - CN=SERVER200,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net
DSA object - CN=NTDS Settings,CN=SERVER200,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net
DNS host name - server200.dpetri.net
Computer object - CN=SERVER200,OU=Domain Controllers,DC=dpetri,DC=net
No current Naming Context
select operation target:

12. Types quit and press Enter. The Metadata cleanup menu is displayed.
select operation target: q
metadata cleanup:

13. Type remove selected server and press Enter.
metadata cleanup: Remove selected server
"CN=SERVER200,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dpetri,DC=net" removed from server "server100"
metadata cleanup:
You will receive a warning message. Read it, and if you agree, press Yes.

Active Directory confirms that the domain controller was removed successfully. If you receive an error that the object could not be found, Active Directory might have already removed from the domain controller.

For more details check here

Monday, December 14, 2009

Eraser

As most IT pros know, when you delete a file from a Windows system, it doesn’t take the time to wipe all the data from that file on the disk. Instead, it simply erases the first letter of the file name and marks the cluster as free space. This capability is great for performance, but it also leaves open an alarming opportunity: If someone can access the drive, either physically or via a different user account, they can scrape your disks for sensitive information.

If you really want to wipe clean a disk or file—you need a tool to help you do the job right. Eraser is one such tool.

Eraser is free, open source and released under the GNU General Public License.
Once you’ve installed Eraser, you can launch it from its system-tray icon or use the right-click context menu-extensions in Internet Explorer as well as the normal start-menu launch. The context menu gives you options to securely delete or move the target file or directory (moving files can leave imprints of their contents on the file system in the same way that deleted files do).

General preferences for Eraser include whether statistical and error reports or logs should be generated, what to do with locked files, which shortcuts you want in your context menu along with what erasure technique should be used as a default, and whether the scheduler should run at Windows startup.

So whether you need help with regulatory compliance or just want to protect your old, “deleted” sensitive information from prying eyes, you might want to consider adding Eraser to your toolbox.

http://eraser.heidi.ie/