Solved

metadata cleanup or delete replication link?

Posted on 2008-06-25
5
1,392 Views
Last Modified: 2008-12-17
Hi guys,

Yesterady one of our server was down and we have to rebuilt the OS and restore everything from the backup.  After backup was completed, i did a reboot. When the server was up and checked the eventlog, i noticed an error :

Event Type: Error
Event Source: SAM Event
Category: None
Event ID: 16650
The account-identifier allocator failed to initialize properly. The record data contains the NT error code that caused the failure. Windows 2000 will retry the initialization until it succeeds; until that time, account creation will be denied on this Domain Controller. Please look for other SAM event logs that may indicate the exact reason for the failure.

After going though the microsoft KB, it said :


RESOLUTION

Delete the replication links for the naming contexts in Windows 2000

In Windows 2000, you can restore a second domain controller to complete initial synchronization. If you cannot restore a second domain controller, you must either perform a metadata cleanup on the non-existent domain controllers or delete the replication links to the Active Directory naming contexts. If you plan to restore the other domain controllers later, you must delete the replication links instead of performing a metadata cleanup.
Before you can delete the replication links to the Active Directory naming contexts, you must identify the objectGUID value by using the Repadmin command. To do this, follow these steps:
1.      Click Start, click Run, type cmd in the Open box, and then click OK.      
2.      At the command prompt, type repadmin /showreps. You will see output that resembles the following:
CN=Schema,CN=Configuration,DC=contoso,DC=comDefault-First-Site-Name\DC02 via RPC objectGuid: 97c68f88-3864-4a12-9962-ca389937e237 Last attempt @ 2004-02-26 09:10.03 was successful.

CN=Configuration,DC=contoso,DC=com Default-First-Site-Name\DC02 via RPC objectGuid: 97c68f88-3864-4a12-9962-ca389937e237 Last attempt @ 2004-02-26 09:14.43 was successful.

DC=contoso,DC=com Default-First-Site-Name\DC02 via RPC objectGuid: 97c68f88-3864-4a12-9962-ca389937e237 Last attempt @ 2004-02-26 09:14.01 was successful.
3.      Type repadmin /delete to delete the replication links. Specify the naming context and the objectGUID as shown in the following examples:
repadmin /delete CN=Schema,CN=Configuration,DC=contoso,DC=com DC01 97c68f88-3864-4a12-9962-ca389937e237._msdcs.contoso.com /localonly
repadmin /delete CN=Configuration,DC=contoso,DC=com DC01 97c68f88-3864-4a12-9962-ca389937e237._msdcs.contoso.com /localonly
repadmin /delete DC=contoso,DC=com DC01 97c68f88-3864-4a12-9962-ca389937e237._msdcs.contoso.com /localonly
4.      Restart the RID Master computer. The RID Master will initialize correctly.      
(taken from http://support.microsoft.com/kb/839879 )

On the paragraph, it mentioned "If you cannot restore a second domain controller, you must either perform a metadata cleanup on the non-existent domain controllers or delete the replication links to the Active Directory naming contexts. "


So, my question is :

how do i know I have to do delete the replication link only or metacleanup only? or both?
0
Comment
Question by:binary_1001010
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 31

Accepted Solution

by:
Toni Uranjek earned 250 total points
ID: 21872005
Hi!

Metadata cleanup process is performed if domain controller goes ofline and is not restored. In this case you purge all its data from Active Directory. Your DC was restored and it is back online so you shouldn't perform metadata clean. Delete replication link, and trigger KCC to repair replication topology.

HTH

Toni
0
 
LVL 9

Author Comment

by:binary_1001010
ID: 21872059
hi toniur, how do i trigger KCC to repair replication topology?
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 21872099
You can use Active Directory Sites and Services or Replication Monitor from Support Tools. Comannd is called "Check replication topology" Or you can use command line:
"repadmin /kcc <dcservername>"
0
 
LVL 9

Author Comment

by:binary_1001010
ID: 21872864
just to confirm, where should we delete the replication ? the DC that we just restored or the DC without any problem?
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 21873125
On the DC that you've restored, but it really does not matter if you delete connection objects for this particular DC on other DCs, because KCC will generate new connection objects automatically.
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

No single Antivirus application (despite claims by manufacturers) will catch or protect you from all Virus / Malware or Spyware threats. That doesn't stop you from further protecting yourself however - and this article is to show you how.
An introduction to the wonderful sport of Scam Baiting.  Learn how to help fight scammers by beating them at their own game. This great pass time helps the world, while providing an endless source of entertainment. Enjoy!
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question