Forum Discussion
Where do all the LDAP Domains come from
I have a forest, that is spitting out a bunch of logs about not being able to LDAP into Forests that doesn't exist anymore. I check the trusts and they aren't there anymore. So where is MDI getting the list of Forests/Domains to LDAP into from?
I have created a case with Microsoft and they don't seem to be very knowledgeable.
5 Replies
Hello Iwillgetbetter ,
Try to enable netlogon debugging mode on a DC:
Enable debug logging for Netlogon service - Windows Client | Microsoft Docs
It helped me some time ago to troubleshoot an issue with logs without the source from a DC server.
- Thanks. The support person got back to me. They are moving this to the directory service team, because they are saying there is Metadata being stored somewhere, they need to remove. And then once it is removed the ticket has to go back to the MDI team to clear the cache of those forests that don't exist anymore. Since it is dealing with Metadata, I think I am going to wait for the directory service team to give me instructions.
- EliOfek
Microsoft
Hi,
For those forest that does not exist any more, did they stop existing before MDI was deployed or after ?
Anyway, I suggest to open a ticket for this, it might be a bug, but support will need to research this specific case, which can't be done over this forum...- They stopped existing before MDI. I have opened a case with Microsoft. Going on two weeks now of nothing. Their support stinks to be honest.
- EliOfekSorry to hear that you had a bad experience with support 😞
Can you please send me the case # in a private message and I will try to see if I can get it escalated ?
Anyway, if those domains/forests stopped existing before MDI was deployed, it's most likely not a bug in MDI. most likely the existing domains still contain references to those "ghost" domains in AD settings, and we find them while traversing the forest.
I would start by making sure there are no left over references.
At this point, even after you find them, it might not be enough to delete them as MDI will cache them, so we might need help from support to purge them in the backend after we are pretty sure that there are no more leftovers.
