troubleshooting Question
FSMO roles out of order after domain controller rebuild.
asked on
We had one of our Windows 2000 Advanced Server domain controllers go down along with the mirror of the drive. So I reinstalled everything from scratch and made it a DC again. We have 2 backup DCs as well. Now I am getting Event ID 16650 SAM errors every couple of minutes that says:
“The account-identifier allocator failed to initialize properly. The record data contains the NT error code that caused the failure. Windows 2000 will retry the initialization until it succeeds; until that time, account creation will be denied on this Domain Controller. Please look for other SAM event logs that may indicate the exact reason for the failure.”
I think what the problem is that this DC which was the first DC in the domain as far as I know had the FSMO roles on it. After making it a DC after the installation it has assumed the FSMO roles again and I cant transfer them to another DC. When I try it says:
“The transfer of the operations master role cannot be performed because: The requested FSMO operation failed. The current FSMO holder could not be contacted.
In the Directory Service log I get an Event ID 1586 (NTDS Replication) error that says:
The checkpoint with the PDC was unsuccessful. The checkpointing process will be retried again in four hours. A full synchronization of the security database to downlevel domain controllers may take place if this machine is promoted to be the PDC before the next successful checkpoint. The error returned was: The naming context is in the process of being removed or is not replicated from the specified server.
How do I get the FSMO roles to another DC and if I can should I demote the redone DC and then reinstall Active Directory? Then would I put the FSMO roles back on it? I cant even edit the domain group policy from any server etc.
“The account-identifier allocator failed to initialize properly. The record data contains the NT error code that caused the failure. Windows 2000 will retry the initialization until it succeeds; until that time, account creation will be denied on this Domain Controller. Please look for other SAM event logs that may indicate the exact reason for the failure.”
I think what the problem is that this DC which was the first DC in the domain as far as I know had the FSMO roles on it. After making it a DC after the installation it has assumed the FSMO roles again and I cant transfer them to another DC. When I try it says:
“The transfer of the operations master role cannot be performed because: The requested FSMO operation failed. The current FSMO holder could not be contacted.
In the Directory Service log I get an Event ID 1586 (NTDS Replication) error that says:
The checkpoint with the PDC was unsuccessful. The checkpointing process will be retried again in four hours. A full synchronization of the security database to downlevel domain controllers may take place if this machine is promoted to be the PDC before the next successful checkpoint. The error returned was: The naming context is in the process of being removed or is not replicated from the specified server.
How do I get the FSMO roles to another DC and if I can should I demote the redone DC and then reinstall Active Directory? Then would I put the FSMO roles back on it? I cant even edit the domain group policy from any server etc.
The Value of Experts Exchange in My Daily IT Life
Experts Exchange (EE) has become my company's go-to resource to get answers. I've used EE to make decisions, solve problems and even save customers. OutagesIO has been a challenging project and... Keep reading >>
Mike
Owner of Outages.IO
Phoenix, Arizona, United States
Member Since 2016
Join a full scale community that combines the best parts of other tools into one platform.
Unlock 1 Answer and 8 Comments.
View membership options“All of life is about relationships, and EE has made a virtual community a real community. It lifts everyone's boat.”
William Peck
Member since 2004
Our community of experts have been thoroughly vetted for their expertise and industry experience.
The Distinguished Expert awards are presented to the top veteran and rookie experts to earn the most points in the top 50 topics.