Attention: Windows Server Guru's

[James Bond]

We recently killed an old domain, but the domain name still appears in the drop down menu during logon.

I found a Microsoft KB article, and thought it would fix it, but it didn't. When I removed the last DC, I made sure to select "This is the last domain controller in the domain" so that it cleaned up all the meta-data.

I can't find any trace of the domain in AD, so I'm not really sure where to look at this point. Any help would be great, thanks.

 

[stash]

Did you remove the trusts from the AD Domains and Trusts snap-in (domain.msc)? That will wack the trusted domain objects that are causing this.

 

[James Bond]

Originally posted by: stash
Did you remove the trusts from the AD Domains and Trusts snap-in (domain.msc)? That will wack the trusted domain objects that are causing this.

Yeah, the only one that appears is the one I want to keep.

 

[stash]

Using adsiedit, you can delete the trusted domain object manually. It will be in the system container. Also look an object named trusteddomain$ in the users container and delete that.

 

[James Bond]

I might not be understanding you right, but I wasn't able to find any references to the old domain. It was called HQ-DOMAIN.
http://pics.bbzzdd.com/users/mzinz/domain_del.JPG

 

[stash]

I see a TDO for corp.filson.com. Is that a different domain? Remember that the name that shows up in the dropdown is the NetBIOS name of the domain, which may be different from the FQDN.

 

[James Bond]

I found a reference in the users container, do I need to delete the highlighted folder?

http://pics.bbzzdd.com/users/mzinz/domain_del2.JPG

 

[James Bond]

Originally posted by: stash
I see a TDO for corp.filson.com. Is that a different domain? Remember that the name that shows up in the dropdown is the NetBIOS name of the domain, which may be different from the FQDN.

Now that the older one is gone (well, almost gone), we only have one domain. I'm afraid that might be our new/main domain...

 

[stash]

Yes, if that domain is gone. If corp.filson.com is the FQDN for the HQ-DOMAIN domain, you will need to delete that TDO object also.

 

[stash]

I'm afraid that might be our new/main domain...

According to your pic, you are in the filson.com domain, not corp.filson.com. But it sounds like you may have a root domain called corp.

Make sure you understand how your environment is set up before you delete anything.

 

[James Bond]

Originally posted by: stash
Yes, if that domain is gone. If corp.filson.com is the FQDN for the HQ-DOMAIN domain, you will need to delete that TDO object also.

How can I find out if corp.filson.com is the FQDN for HQ-Domain?

 

[stash]

If HQ-DOMAIN is gone, there's no easy way short of documentation. You can check any current domains by right-clicking them in the Domains and Trusts MMC and clicking properties. The NetBIOS name is listed in the Domain Name (pre-Windows 2000) box.

 

[James Bond]

Originally posted by: stash
If HQ-DOMAIN is gone, there's no easy way short of documentation. You can check any current domains by right-clicking them in the Domains and Trusts MMC and clicking properties. The NetBIOS name is listed in the Domain Name (pre-Windows 2000) box.

So if I check the Domain/Trusts MMC properties for filson.com, could I establish whether or not corp.filson.com = filson.com? If it turns out that corp.filson.com and filson.com weren't the same domain, could I delete corp.filson.com?

 

[James Bond]

http://pics.bbzzdd.com/users/mzinz/trusts.JPG

It listed the netBIOS name as FILSON

 

[stash]

No.

corp.filson.com and filson.com are separate domains. We know for a fact that the filson.com domain exists, because your picture shows you editing it. I'm guessing that corp.filson.com still exists, but I don't know.

If you don't know how your environment is set up (domain names, forests, etc), you probably shouldn't be fiddling around in adsiedit. First find out what the current structure of the network is, and go from there.

 

[stash]

So your last picture shows you still have a trust to corp.filson.com. So you probably don't want to delete that in adsiedit

You said the domain was listed as FILSON. Which one? Corp.filson.com or filson.com?

You need to know the NetBIOS names of both domains before doing anything.

 

[James Bond]

Originally posted by: stash
No.

corp.filson.com and filson.com are separate domains. We know for a fact that the filson.com domain exists, because your picture shows you editing it. I'm guessing that corp.filson.com still exists, but I don't know.

If you don't know how your environment is set up (domain names, forests, etc), you probably shouldn't be fiddling around in adsiedit. First find out what the current structure of the network is, and go from there.

Thanks, I appreciate the help