Hi
I recently suspicious that some one in my company join new additional domain controller to my primary DC and after replication and get the domain controller partitions ,he disjoint the new additional dc .
I got the his event in my dns log :
The DNS server was unable to create a resource record for d630907c-e2f4-41cf-a2c6-adc087f25f46._msdcs.metro.com. in zone metro.com. The Active Directory definition of this resource record is corrupt or contains an invalid DNS name. The event data contains the error.
I want to translate the DNS alias sid :d630907c-e2f4-41cf-a2c6-adc087f25f46to computer name in order to find who did this?
is there a way to find out previous DC computer name after hey disconnected or DC computer account deleted?
I wonder to know ho did this?
Regards