Find a tombstoned device in a forest

I have a tombstoned device on a domain that has over 80 domain controllers. We are having a very difficult time finding that device. Unfortunately, EventID 1864 in the Directory Service log does not tell me the name of the device. The best
way I can think of finding it at this point, is to search the NTDS Replication log on each server in the domain for EventID 2042.
I have found a few scripts out there that help with searching for specific EventID's, but they seem to all require a list of computers to monitor. What I'm looking to do is run a script once, search all domain controllers in a forest for that specific event
ID and then tell me which server has the error.
Is there a way to take the Powershell Centralized Log Monitor and make it so it does not require the "monitored_computers.txt" file and will instead search the entire Forest?

Hi jrv
This seems to work but only returns the results from the server I am on. I tested this by changing the EventID to one that is on the current server and doing a count total from Event Viewer. The EventID that I'm looking for is actually in the DFS Replication
log, so I changed it...
Get-ADDomainController |
ForEach-Object{
Get-EventLog 'DFS Replication' -computer $_.Name |
Where-Object {$_.EventID -eq 1202}}
This returns 10 entries with the same timestamp as what is in the event viewer for that server. When I change the EventID to 2042 it returns nothing, and there are none of those events on this server.

Similar Messages

Find a tombstone in a large forest

I need some guidance in finding a tombstone in a forest that has 90 domain controllers and 79 sites. Each domain controller is receiving three daily EventID 1864 alerts. One for the domain partition, one for the configuration partition and one
for the schema partition. I have checked the replication between all domain controllers using repldiag /CheckForStableReplTopology and it returned No topology errors found.
I created a PS script to go out to the forest and search all DC's for EventID 2042 and it returned nothing. Due to the size of the infrastructure and the fact that they set their tombstone lifetime to 400 days, running any type of query where I can pull
GUID's and check DNS, returns literally thousands of entries in the output. I currently have a support case with Microsoft that has been open for nearly two weeks now but we have not found a resolution that wouldn't take countless man hours. I came into
this situation recently and was told that this tombstone has been out there for around 4 years. The reason this has come up again is because the client is looking to raise the functional level of their forest from 2003 to 2008. I am doing this for a client,
so everything is done remotely, and sometimes very slowly due to the fact that these domain controllers are located all over the world, and sometimes in places that have very bad connectivity.
A few quick questions:
Will they/we be able to raise the functional level of the forest with the tombstone there?
If we can, will this have any impact in the long run, or will it just remain a tombstone until it is found?
If we can't, is there a workaround to get the functional level raised while the tombstone is still there?
Is there any quick way to find either the name, IP address or even the GUID of the device that is causing these EventID's?
Any assistance would be greatly appreciated as I've tried everything I could possibly think of and have been researching and trying different tools for over two weeks now.

If strict replication consistency on domain controller is not enabled, lingering objects can be replicated to domain controller.
AD DS: Strict replication consistency should be enabled on all domain controllers in this forest
http://technet.microsoft.com/en-us/library/dd723692(v=ws.10).aspx
Strict Replication Consistency - Myth versus Reality
http://blogs.technet.com/b/askds/archive/2010/02/15/strict-replication-consistency-myth-versus-reality.aspx
http://technet.microsoft.com/en-us/library/cc816938(v=ws.10).aspx
If the server has reached tombstone lifecycle period the best way to deal with is demote/promote the DC.You cannot demote the faulty DC gracefully you need to do forcefull removal.You need to ran dcpromo/force removal and then run matadata cleanup on other
DC(healthy) to remove the instance of faulty DC from AD database and DNS.If faulty DC is fsmo role holder server the you need to seize the FSMO role on other DC.Once done you can promote the Server back as DC.
Sometimes its difficult to remove lingering object either using repadmin /removelingeringobjects or other tool. If lingering objects spreads then its more difficult to tackle them, demoting & promoting the server containg the lingering is best bet.
Complete Step by Step Guideline to Remove an Orphaned Domain controller (including seizing FSMOs, running a metadata cleanup, and more)
http://msmvps.com/blogs/acefekay/archive/2010/10/05/complete-step-by-step-to-remove-an-orphaned-domain-controller.aspxis
To remove lingering object see this:http://blogs.technet.com/b/glennl/archive/2007/07/26/clean-that-active-directory-forest-of-lingering-objects.aspx
Hope helps
Best Regards,
Sandesh Dubey.
MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator |
My Blog
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

How do i find out what devices are authorised on my apple ID?

I have just bought a new iMac and want to get all my itunes library etc on it. However, apparently i have reached my limit of 5 authorisations, which is entirely possible as I have had a number of iphones, Macair and ipads, some of which I either no longer own or are no longer functioning. How do I find out what devices are authorised and then deauthorise any that I don't use any more - given that they may not even work!

Welcome to the Apple Community.
You can't de-authorise just the computers you no longer have access to.
Your only option is to de-authorise all your computers and then re-authorise those you wish to be authorised. You can do this by logging into your account settings in iTunes on your computer (Store > View My ID) and selecting the option to de-authorise all.
Please note however, you are only permitted to do this once in each 12 month period, therefore you would be better de-authorising your computers before you lose access to them. you can do this from the 'Store' menu in iTunes.

TS1646 We have several apple devices in our family who use my debit card for itune charges. I need to find out which device (itune account) these charges are coming from. Can you help?

We have several apple devices in our family who use my debit card for itune charges. I need to find out which device (itune account) these charges are coming from. Can you help?

You can't tell which device a purhcase was made on, but if your family members each have their own iTunes account to which your card is linked then you can check the purchase history on each of those accounts via the Store > View Account menu option on your computer's iTunes - that should have 'purchase history' section with a 'see all' link to the right of it

I cannot get MainStage 3 to find the Aggregate Device I am trying to use for input. I have two USB interfaces and need to use both for input.

The MainStage 3 Audio preferences window will not find the Aggregate Device input. I have both an Apogee Jam and a MOTU Mike Ultralight in USB ports. The Audio aggregator finds them and treats them as one device. The Aggregate Device does not show up in either Logic or MainStage. However, unlike Logic, MainStage does not show "System Settings" an input device.

The iphone 3G can only support 4.2.1
There are no newer updates availabel for this model.

Could not find any available Global Catalog in forest when running RemoteMailbox cmdlet

My current Exchange environment is a hybrid configuration of Office 365, Exchange 2013 hybrid, and Exchange 2007 on-premise.
I have a script responsible for enabling remote mailboxes and assigning O365 licenses to a list of users; essentially provisioning users an O365 mailbox. This script runs every hour through a defined scheduled task in the Task Scheduler.
The script is proven to work but will intermittently throw an error on some days: "Could not find any available Global Catalog in forest root.xyz.com"
Here are the nuances of the error when it does occur:
It will only throw the error when the script is run via scheduled task - the script will work fine if executed from the command line
The error occurs when "Enable-RemoteMailbox" or "Get-RemoteMailbox" is called.
The same error will occur with ANY script that calls "Enable-RemoteMailbox" or "Get-RemoteMailbox" and is ran via scheduled task - even when the RemoteMailbox cmdlet was the only line in the script
Here is the output and error when Get-RemoteMailbox -verbose is ran:
VERBOSE: [15:49:52.474 GMT] Get-RemoteMailbox : Active Directory session
settings for 'Get-RemoteMailbox' are: View Entire Forest: 'True',
VERBOSE: [15:49:52.489 GMT]
Get-RemoteMailbox : Runspace context: Executing
user: ,
Executing user organization: ,
Current organization: ,
RBAC-enabled:Disabled.
VERBOSE: [15:49:52.489 GMT] Get-RemoteMailbox : Beginning processing
VERBOSE: [15:49:52.521 GMT] Get-RemoteMailbox : Current ScopeSet is: {
Recipient Read Scope: {{, }},
Recipient Write Scopes: {{, }}, Configuration Read Scope: {{, }},
Configuration Write Scope(s): {{, }, },
Exclusive Recipient Scope(s): {},
Exclusive Configuration Scope(s): {} }
VERBOSE: [15:49:52.521 GMT] Get-RemoteMailbox : Resolved current organization: .
VERBOSE: [15:49:52.521 GMT] Get-RemoteMailbox : Searching objects "abose" of type "ADUser" under the root "$null".
VERBOSE: [15:49:52.536 GMT] Get-RemoteMailbox : Previous operation run on global catalog server 'evw-xyzdc-p02.ad.xyz.com'.
Get-RemoteMailbox : Could not find any available Global Catalog in forest root.xyz.com.
At C:\IDM_In\Scripts\MinimalTest.ps1:42 char:14
+ $abose = Get-RemoteMailbox 'abose' -verbose
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Get-RemoteMailbox], ADTransientException
+ FullyQualifiedErrorId : E421EF0B,Microsoft.Exchange.Management.RecipientTasks.GetRemoteMailbox
VERBOSE: [15:49:52.567 GMT] Get-RemoteMailbox : Ending processing
What could be the cause of this intermittent error?
Thanks for any help

looks to me permission error as when you are running it via a schedule task is is not able to call exchange shell/ commands {confirm this} where as when you running this manually looks to me you open exchange shell, may be as admin also and then running
the script.
schedule task process is not able to get the permission..
MARK AS USEFUL/ANSWER IF IT DID
Thanks
Happiness Always
Jatin

Why are my iphone4S and ipad3 no longer being seen in finder under the devices section

I am new to the Apple ecosystem and for the most part I have fallen in love with it, I have had my fill of the PC era and was on the verge of a mental breakdown using them. Well I bought a MBP 13" an ipad3 and I have an iPhone 4s. When I first got these items I was able to drag and drop files like a movie that I own and copied to the hard drive. This was done in finder, under the devices section it would show my phone and my ipad however after I installed the latest iTunes software it seems that this has disapeared and now I cannot find my devices in the finder area to drag and drop these files anymore. So, my question is this, has Apple done away with this function and if so how can I drag and drop a file to the ipad3 now? Thank you all for your help.

Care to share which OS system you are using?

Windows (8.1) could not find back up devices while creating a system image (0x80070003)

I am trying to create a system image backup under Windows 8.1 Windows Backup is unable to find a backup device with error (0x80070003). No drives are shown under "On a hard disk" and select <Refresh> gives the same error.
A LaCie 1Tb external harddisk is connected to the PC and formatted as an NTFS drive. The hard disk is visable under Harddisk Management and shows up under Explorer mapped as Drive D:
Any thoughts?

Hi,
As you mentioned, the Drive D is mapped from your external harddrive. How did you connect this hard drive into this computer?
If it was connected via network, Please choose "On a network location" and locate the harddrive to check the results.
Kate Li
TechNet Community Support

HT5927 Using apple configurator with supervised devises, enabling iCloud/ find my iOS device (after being supervised), backing up that supervised / find my iPhone enabled image, --issue; unable to apply back up to any iOS device (including the orign. devi

Senario:
Need to manage 500 Enterprise iPads
Requirements;
1) Trackable via Find my iOS device (we have 500 iPads and with the 100 device limit per iCloud account for Find my iOS device limit we have 5+ iCloud accounts).
2) Individually named iPads for locating and sending commands to wipe, lost mode, etc.. on map per Find my iOS device (we uniquely name them in Apple Configurator either by using the "sequensetially numbering feature", or by creating individual back ups (yes, 450) with the name specified in the image).
3) Find my iOS device feature enabled in base Prepared or Supervised image (using one of our 5+ iCloud accounts) (image can be created during prepared stage, or in supervised stage) - tried both and have the same issue - which I am getting to...
4) VPP codes for paid apps (all VPP codes purchased with generic account which is the Apple Admin account for VPP purchases). Apple Configurator is set up under a different/ unique Apple account (i.e. not VPP admin account) and not logged into iTunes for any purchases/ services).
Issue: Can not do any following senarios;
A)
1) configure master iOS 7 iPad with iCloud account with Find my iOS feature enabled in Prepare stage (added during preparing stage)
2) configure master iOS 7 iPad with iCloud account with Find my iOS feature enabled in Supervised stage (added after supervising, and then backing up that supervised and iOS Find my iOS device enabled)
B) 1) Apply master image to any Supervised iPad (under senario step A) or senario step B)), including the (Supervised or/ Prepared iPad that was used to create the maset iOS 7 image
Result = fail with Apple generic code "4" ; This is obviously due to Find my iOS device feature enabled during image capture.
According to Apple (see Apple Config. Help) the 'Activation lock' (new feature in iOS 7) will not be enabled on a supervised device when an iCloud account with "Find my iDevice" is enabled. Their "help files" seem to imply after the device is Supervised, and a person (presumably and end user) adds thier own iCloud account with Find my iOS device enabled the activation lock is not enabled and erasing/ reconfiguring with Apple Configurator will not cause reimaging probhlems such as requiring the end user's credentials to reconfigure the device using Apple Configurator (i.e. you won't need the end user's credentials).
Needed: To be able to configure Supervised iPads with iCloud account (Enterprised owned iCloud account) configured on the basse image, which has Find my iOS device enabled, and to be able to apply that base image to all Enterprise iPads without generic apple error code 4 issue.

Hi all
I am trying to replicate these steps in my environment but I am having trouble getting an iCloud backup restored to a supervised device. Can someone clarify the steps? The parts I am unsure on are:
1) Do you Prepare in Configurator with all the institution owned apps? Or do you install them after restoring the iCloud backup?
2) After entering the personal AppleID to restore the iCloud backup, the setup wizard prompts for the Institution/Configurator AppleID, there is an option to 'Skip Now'. Do you enter in the password for the institution account? or do you skip that step?
3) What exactly is on the screen in the 'mini setup assistant' after the restore when you Refresh with Configurator?
Any help would be greatly appreciated!

HT201441 I do not know who activated my Find My Phone Device on my ipad, the pad is locked to the user's account and I cannot remove the account. Please what can I do?

Good work to the experts in the house. I have an ipad that I have been using for a while now and someone recently picked it and toyed with it. The person activated Find My Phone device on my ipad and the pad locked to his account. I have tried to reach everyone I know to remove this account but I couldn't get anyone to give a right code. The e-mail address of the person didn't show properly for me to contact who the person is, I have done recovery to the pad but still asking for the person's code. I couldn't use my ipad since this happened to me. I need somebody's help to use my pad again. Thanks.

Did you buy the iPad from someone?

RT: Remote desktop says "can't find a suitable device for drive C"

Hello,
there is a french post on exactly the same topic, but I can't apply the solution given there.
My problem is the following: I have a remote desktop prepared to work as RT target. It has been checked for compatibility, the hard drive has been formatted in FAT32 format, it has been found by my host and has been assigned a static ip address. I have installed the software I need ( LabView 9.0 RT) using MAX. Now, when I try to boot it with the option "boot using software installed into the hard drive", all I get is the message
"Can't find a suitable device for drive C"
I have reseted the BIOS, have tried formatting the hard drive in the other format, uninstalled and reinstalled the software, tried to start the target pc without the usb stick, but nothing seems to work.
Do you have any ideas about what is going wrong?
Thank you,
Samuel
Solved!
Go to Solution.

So you've got a IDE (and not SATA) hard drive? That should be supported anyway.
That would only confirm my experience... it's hard to find hardware compatible with LV RT. Before buying you cannot know if it's compatible. Once you have it the evaluation tool might tell you it's supported but still it might not work. I tried several motherboards in the last years, most of them did not work.
Your best bet might be to use relatively old hardware.

I want a soundbar for my 6th generation nano but am having trouble finding a compatible device. I'd like more than a dock, ideally a soundbar with wireless subwoofer. I'll only use the soundbar for music, not TV home theater. Any suggestions?

I want a soundbar for my 6th generation nano but am having trouble finding a compatible device. I'd like more than a dock, ideally a soundbar with wireless subwoofer. I'll only use the soundbar for music, not TV home theater. Any suggestions? Thanks.

Google

I cant find the "manage devices" on my "account information"

Can someone help me on my account information page i cant find the "Manage devices" someone help me please

You need to enable automatic downloads on the computer or device that you would like to "manage". As soon as this is done the manage device button will appear in your account.
Link: http://support.apple.com/kb/HT4539?viewlocale=en_US&locale=en_US

HT204368 I am having trouble pairing my iPhone4 with bluetooth device. It was connected but is not able to connect after both devices were shut and then switched on, as per Apple instructions. phone does find any bluetooth device closeby. how to fix?

I am having trouble pairing my iPhone4 with bluetooth device. It was connected but is not able to connect after both devices were shut and then switched on, as per Apple instructions. phone does find any bluetooth device closeby. how to fix?

NovaRiddle wrote:
I am having trouble pairing my iPhone4 with bluetooth device. ...
Depends on the device...
Have a look here for Supported Bluetooth Profiles
http://support.apple.com/kb/HT3647

HT3728 AIRPORT UTILITY IS UNABLE TO FIND ANY WIRELESS DEVICE 5.6.1

Ok So I have bought a 2TB Time Capsule, for the past few weeks we have been doing our backups on it etc and just using our already installed Netgear wireless router. Tonight I decided I would "extend an already existing wireless router" - after following all the steps etc and then clicking apply etc, the Airport Utility said that it would need to restart the time capsule etc. After about 5 mins and it looked like it had frozen, airport utility re-started and now all i get is:
"Airport Utility is Unable to find any wireless device. Make Sure the Airport Wireless Device you want to set up is plugged in and in range of your computer, and then click rescan"
I have clicked Rescan like 10 times
I have quit and restarted Airport Utility as well as my Mac OSX 10.5.8
I have pulled the Time Capsule plug out of it and restarted it
I have turned of my airport on my computer and turned it back on again
I have read a number of posts - yet nothing seems to give me any more options other than to rescan.

If you are trying to connect the Time Capsule to the Netgear router using a wireless only connection, Apple's "extend a wireless network" feature was designed to only work with other Apple routers. It is extremely unlikely that this setting would work with a Netgear product.
You will need to start over again and perform a Factor Default Reset on the Time Capsule and then re-configure it back to the original settings that you set up previously.
Resetting an AirPort Base Station or Time Capsule FAQ

Find a tombstoned device in a forest

Similar Messages

Maybe you are looking for