Hello,

I'm having problem removing Domain trust from the list. What I have here is
two servers, one is file server (PDC and DNS) and the other server is SQL
server. I'm trying to set up trusts between two server to allow to replicate
between the two. It works fine before and apparently that one of the hard
drive failed and the hot spare take over. All seem to be working fine. Then
later I found out that replication is not working. So, I went throught
troubleshooting and turn out that I'm not sure if the AD domain and trusts is
being corrupted. So, I thought I should go ahead reset it by deleting the
trust name. The outgoing trust on main file server, I could not able to
remove it!! here's the message below after I hightlighted the "ESD-SQL" and
click "Delete" and it say:

"Are you sure you want to remove the outgoing trust with the esd-sql domain?
If so, you must also remove this domain from the incoming trust list on the
esd-sql domain."

I click ok then next message say "Access is denied". I have a full right on
both servers and I don't know why it would not let me remove it. So I got on
the SQL server side and check to be sure it being removed. When I click on AD
Domans and Trusts and took a while to load it. Then I right click on
"ESD.COM" and the message said:

"You cannot modify domain or trust information because a Primary Domain
Controller (PDC) emulator cannot be contacted. Please verify that the PDC
emulator and the network are both online and functioning properly."

So, I'm assuming that there's something wrong with AD Domains and Trusts on
the main server. Do you have any idea how can I remove or reset the trusts??

Scott

When you lost a hard drive did you lose the dc itself? If so then you
probably lost the fsmo role holder, from what it sounds like.

Run diagnostics against your Active Directory domain.

If you don't have the tools installed, install them from your server install
disk.
d:\support\tools\setup.exe

Run dcdiag, netdiag and repadmin in verbose mode.
-> dcdiag /e /c /v /sC_Name /f:c:\dcdiag.log
-> netdiag.exe /v > c:\netdiag.log (On each dc)
-> repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt

If you download a gui script I wrote it should be simple to set and run
(DCDiag and NetDiag). It also has the option to run individual tests
without having to learn all the switch options. The details will be output
in notepad text files that pop up automagically.

The script is located in the download section on my website at
http://www.pbbergs.com

Just select both dcdiag and netdiag make sure verbose is set. (Leave the
default settings for dcdiag as set when selected)

When complete search for fail, error and warning messages.





--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Scott" <Scott@discussions.microsoft.com> wrote in message
news:82467679-07B8-4986-B3DF-28426266B530@microsoft.com...
> Hello,
>
> I'm having problem removing Domain trust from the list. What I have here
> is
> two servers, one is file server (PDC and DNS) and the other server is SQL
> server. I'm trying to set up trusts between two server to allow to
> replicate
> between the two. It works fine before and apparently that one of the hard
> drive failed and the hot spare take over. All seem to be working fine.
> Then
> later I found out that replication is not working. So, I went throught
> troubleshooting and turn out that I'm not sure if the AD domain and trusts
> is
> being corrupted. So, I thought I should go ahead reset it by deleting the
> trust name. The outgoing trust on main file server, I could not able to
> remove it!! here's the message below after I hightlighted the "ESD-SQL"
> and
> click "Delete" and it say:
>
> "Are you sure you want to remove the outgoing trust with the esd-sql
> domain?
> If so, you must also remove this domain from the incoming trust list on
> the
> esd-sql domain."
>
> I click ok then next message say "Access is denied". I have a full right
> on
> both servers and I don't know why it would not let me remove it. So I got
> on
> the SQL server side and check to be sure it being removed. When I click on
> AD
> Domans and Trusts and took a while to load it. Then I right click on
> "ESD.COM" and the message said:
>
> "You cannot modify domain or trust information because a Primary Domain
> Controller (PDC) emulator cannot be contacted. Please verify that the PDC
> emulator and the network are both online and functioning properly."
>
> So, I'm assuming that there's something wrong with AD Domains and Trusts
> on
> the main server. Do you have any idea how can I remove or reset the
> trusts??
>
> Scott