Solved

metadata cleanup or delete replication link?

Posted on 2008-06-25
5
1,383 Views
Last Modified: 2008-12-17
Hi guys,

Yesterady one of our server was down and we have to rebuilt the OS and restore everything from the backup.  After backup was completed, i did a reboot. When the server was up and checked the eventlog, i noticed an error :

Event Type: Error
Event Source: SAM Event
Category: None
Event ID: 16650
The account-identifier allocator failed to initialize properly. The record data contains the NT error code that caused the failure. Windows 2000 will retry the initialization until it succeeds; until that time, account creation will be denied on this Domain Controller. Please look for other SAM event logs that may indicate the exact reason for the failure.

After going though the microsoft KB, it said :


RESOLUTION

Delete the replication links for the naming contexts in Windows 2000

In Windows 2000, you can restore a second domain controller to complete initial synchronization. If you cannot restore a second domain controller, you must either perform a metadata cleanup on the non-existent domain controllers or delete the replication links to the Active Directory naming contexts. If you plan to restore the other domain controllers later, you must delete the replication links instead of performing a metadata cleanup.
Before you can delete the replication links to the Active Directory naming contexts, you must identify the objectGUID value by using the Repadmin command. To do this, follow these steps:
1.      Click Start, click Run, type cmd in the Open box, and then click OK.      
2.      At the command prompt, type repadmin /showreps. You will see output that resembles the following:
CN=Schema,CN=Configuration,DC=contoso,DC=comDefault-First-Site-Name\DC02 via RPC objectGuid: 97c68f88-3864-4a12-9962-ca389937e237 Last attempt @ 2004-02-26 09:10.03 was successful.

CN=Configuration,DC=contoso,DC=com Default-First-Site-Name\DC02 via RPC objectGuid: 97c68f88-3864-4a12-9962-ca389937e237 Last attempt @ 2004-02-26 09:14.43 was successful.

DC=contoso,DC=com Default-First-Site-Name\DC02 via RPC objectGuid: 97c68f88-3864-4a12-9962-ca389937e237 Last attempt @ 2004-02-26 09:14.01 was successful.
3.      Type repadmin /delete to delete the replication links. Specify the naming context and the objectGUID as shown in the following examples:
repadmin /delete CN=Schema,CN=Configuration,DC=contoso,DC=com DC01 97c68f88-3864-4a12-9962-ca389937e237._msdcs.contoso.com /localonly
repadmin /delete CN=Configuration,DC=contoso,DC=com DC01 97c68f88-3864-4a12-9962-ca389937e237._msdcs.contoso.com /localonly
repadmin /delete DC=contoso,DC=com DC01 97c68f88-3864-4a12-9962-ca389937e237._msdcs.contoso.com /localonly
4.      Restart the RID Master computer. The RID Master will initialize correctly.      
(taken from http://support.microsoft.com/kb/839879 )

On the paragraph, it mentioned "If you cannot restore a second domain controller, you must either perform a metadata cleanup on the non-existent domain controllers or delete the replication links to the Active Directory naming contexts. "


So, my question is :

how do i know I have to do delete the replication link only or metacleanup only? or both?
0
Comment
Question by:binary_1001010
  • 3
  • 2
5 Comments
 
LVL 31

Accepted Solution

by:
Toni Uranjek earned 250 total points
ID: 21872005
Hi!

Metadata cleanup process is performed if domain controller goes ofline and is not restored. In this case you purge all its data from Active Directory. Your DC was restored and it is back online so you shouldn't perform metadata clean. Delete replication link, and trigger KCC to repair replication topology.

HTH

Toni
0
 
LVL 9

Author Comment

by:binary_1001010
ID: 21872059
hi toniur, how do i trigger KCC to repair replication topology?
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 21872099
You can use Active Directory Sites and Services or Replication Monitor from Support Tools. Comannd is called "Check replication topology" Or you can use command line:
"repadmin /kcc <dcservername>"
0
 
LVL 9

Author Comment

by:binary_1001010
ID: 21872864
just to confirm, where should we delete the replication ? the DC that we just restored or the DC without any problem?
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 21873125
On the DC that you've restored, but it really does not matter if you delete connection objects for this particular DC on other DCs, because KCC will generate new connection objects automatically.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It’s been over a month into 2017, and there is already a sophisticated Gmail phishing email making it rounds. New techniques and tactics, have given hackers a way to authentically impersonate your contacts.How it Works The attack works by targeti…
This article summaries thoughts and ideas from two years of sustained use. It provides good reasoning to make the jump to Windows 10.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question