Solved

My DC who was operations Master died, and cannot be revived.  Getting SAM error on remaining DC

Posted on 2004-10-25
495 Views
Last Modified: 2012-05-05
My DC that was Op Master died, and now I am getting a crazy amount of SAM errors on my remaining DC, saying I will be unable to create new accounts.  I cannot change the operations master to the other machine because I cannot get it revived - so it says it's "offline" when I go to the AD Scema snap in.  I had AD running on both machines when th op master died,and the AD seemed to be replicating fine, in that if I made a new account on the op master it showed up in users and computers on the second DC, so I thought it wouldn't be a big deal.  I get an error saying that "the account identifier failed to initialize properly..."blah, blah and I think that this has to do with the operations master roles not being transfered.  I cannot add users and everything is messed up.  I am an AD lightweight, so go easy on me please...Can anyone help?
0
Question by:Lynniebobinnie
    5 Comments
     
    LVL 70

    Accepted Solution

    by:

    Yep...

    Ensure you have the DNS Service set up on your new Domain Controller.

    Then here's how to force transfer the roles onto the new server:

    Start
    Run

    Then start typing this lot in (at any time ? shows the lists of available commands):

    ntdsutil
    roles
    connections
    connect to domain <your domain>
    connect to server <your server>
    quit <quits to FSMO Maintenance>
    seize PDC
    seize Domain naming Master
    seize RID Master
    seize Schema Master
    seize Infrastructure Master
    quit <quits the program>

    Confirm each of those is taken over correctly. It'll let you know after each one

    Make your server a Global Catalog (right click on NTDS Settings for the Server in Active Directory Sites and Services).

    Let me know if you run into any problems with that.
    0
     
    LVL 70

    Expert Comment

    by:Chris Dent

    I should have added this point.

    It's really really important that after Seizing those roles your Old Server **never** comes back onto the domain.

    If you recover the hardware it must be rebuilt.
    0
     
    LVL 70

    Expert Comment

    by:Chris Dent

    I assumed all roles were on the old server, obviously you won't need to seize roles if the server already runs them or another working server has it.

    Sorry for all the additional comments, think I need a coffee.
    0
     
    LVL 20

    Assisted Solution

    by:Debsyl99
    Hi
    Just to check - you only need to seize the roles that are no longer available, so be careful -
    How To Find Servers That Hold Flexible Single Master Operations Roles
    http://support.microsoft.com/default.aspx?scid=kb;en-us;234790
    Another way to locate a FSMO role holder.
    http://www.jsiinc.com/SUBH/TIP3500/rh3509.htm
    The following is th ms article that relates to Chris's post above:
    Using Ntdsutil.exe to seize or transfer FSMO roles to a domain controller
    http://support.microsoft.com/default.aspx?scid=kb;EN-US;255504

    Once you've successfully seized roles you will then need to remove your extinct dc from active directory:
    How to remove data in Active Directory after an unsuccessful domain controller demotion - be ultra careful with adsiedit if you use it.
    How to remove data in Active Directory after an unsuccessful domain controller demotion
    http://support.microsoft.com/default.aspx?kbid=216498&product=nts40

    You may also need to look at establishing a new global catalog server if that was set on the old dc - will post on that if you need further instructions

    Deb :))
    0
     

    Author Comment

    by:Lynniebobinnie
    thakns, I'll give it a try and see what transpires...
    0

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    When we want to run, execute or repeat a statement multiple times, a loop is necessary. This article covers the two types of loops in Python: the while loop and the for loop.
    This video Micro Tutorial is the second in a two-part series that shows how to create and use custom scanning profiles in Nuance's PaperPort 14.5 (http://www.experts-exchange.com/articles/17490/). But the ability to create custom scanning profiles a…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    884 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now