Tech Support > Operating Systems > Windows 2003 > LDAP error can not perform operation on non leaf object
LDAP error can not perform operation on non leaf object
Posted by Mark on March 1st, 2004


I am trying to delete an orphan domain using ntdsutil and
I am recieving the following error:

metadata cleanup: remove selected domain
DsRemoveDsDomainW error 0x2015(The directory service can
perform the requested o
peration only on a leaf object.)

Any ideas?

Thanks

Mark

Posted by Tim Springston \(MSFT\) on March 2nd, 2004


Hi Mark-

This indicates that there are most likely some domain controllers, or at
least some remaining AD objects for them, in that child domain. You need to
do a METADATA CLEANUP (per KB 2164968) first, then try and remove the child
domain.

Please repost if that doesn't help out.

--
Tim Springston
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
"Mark" <mcc171@psu.edu> wrote in message
news:485e01c3ffa2$9825ba20$a501280a@phx.gbl...


Posted by Jay Connor on March 5th, 2004


"Tim Springston \(MSFT\)" <tspring@online.microsoft.com> wrote in message news:<##AQ6UKAEHA.1464@tk2msftngp13.phx.gbl>...

Here is what I believe to be the correct answer to your problem:

Tim correct above in that there are objects still hanging around and
the key is to delete the naming contexts first starting with the
following

list sites
1 - CN=sitename,CN=Sites,CN=Configuration,DC=yourparen tdomainname,DC=com
select site 1

list domains
4 - DC=yourdomainname,DC=yourparentdomain,DC=com
select domain 4

list naming context
12=DC=yourdomainname,DC=yourparentdomain,DC=com
13=DC=DomainDnsZones,DC=yourdomainname,DC=yourpare ntdomain,DC=com
select naming context 13

quit
delete naming context

set operation target
select naming context 12

quit
delete selected naming context

click yes on the popup

delete selected domain

click yes on the popup

Once you have done this you should be all set. if this doesn't work
make sure all references to you domain name are removed whether they
are actual domain controllers, naming contexts and of course from all
sites before you actually attempt to delete the domain itself.

hope this helps


Similar Posts