Monitor global catalog removal in Event Viewer

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To verify that the global catalog has been removed from a domain controller, monitor Event Viewer. The KCC logs Event 1268, when the global catalog has been successfully removed.

Administrative Credentials

To perform this procedure, you must be a member of the Domain Users group.

To monitor global catalog removal in Event Viewer

  1. Click Start, point to Programs, Administrative Tools, and click Event Viewer.

  2. Right-click Event Viewer (Local), and then click Connect to another computer.

  3. In the Select Computer dialog box, click Another computer, type the name of the server from which you removed the global catalog, and then click OK.

  4. Under Event Viewer, click Directory Services log.

  5. Look for NTDS KCC event ID 1268, which indicates that the global catalog is removed from the local machine.