Metadata cleanup, this task is performed when we want to remove data that identifies a Domain Controller for replication in Active directory environment.
We will be using ntdsutil.exe to perform this task.
ntdsutil.exe is a command line tool which is autometically installed on all domain controllers.
Domain Controllers running on windows 2003 SP1, metadata cleanup also removes 'File Replication Service' (FRS) connection and attempts to transfer or seize any Operation Master roles that retired domain controller holds.
Procedure:
- Start > Run
- type cmd to open command prompt.
- type ntdsutil
this will change prompt to ntdsutil: - ntdsutil: metadata cleanup
- metadata cleanup: connection
- server connections: connect to server
(e.g., dc001.domain.local)
some novice users will think which server to connect, it will be the DC from which you want to remove data. mostly it will be the default DC which is created when we setup AD, or in some scenarios this utility is used when we seize roles.
after we initiate 'connect to server' we will be connected and prompt will return to 'server connections' - server connections: quit
we will get back to 'metadata cleanup' prompt. - metadata cleanup: select operation target
- select oepration target: list sites
this will give us all the sites that we have in ADSS (active directory sites and service) along with numerical values prefixed, this numerical value will be used in next step.
e.g.,
0-CN=default-first-site-name,CN=sites,CN=configuration,DC=domain,DC=local - select operation target: select site
- select operation target: list domains in site
again we will get numerical values prefixed with domains we have in list
e.g., 0 - DC=domain,DC=local - select operation target: select domain
- select operation target: list servers in site
this will give us numerical value prefixed list of servers that we have in our domain and site that we selected. - select operation target: select server
- select operation target: quit
- metadata cleanup: remove selected server
again you will be given prompt at metadata cleanup: go ahead and type quit and again quit when you are given ntdsutil: prompt.
This is how DC data is remove from AD successfully.
Hope this article helped you, thanks for reading.
I apologies for mistakes in my article if any.
Comments are most welcome.
Regards,
Wasim.
No comments:
Post a Comment