Solved

metadata cleanup or delete replication link?

Posted on 2008-06-25
5
1,373 Views
Last Modified: 2008-12-17
Hi guys,

Yesterady one of our server was down and we have to rebuilt the OS and restore everything from the backup.  After backup was completed, i did a reboot. When the server was up and checked the eventlog, i noticed an error :

Event Type: Error
Event Source: SAM Event
Category: None
Event ID: 16650
The account-identifier allocator failed to initialize properly. The record data contains the NT error code that caused the failure. Windows 2000 will retry the initialization until it succeeds; until that time, account creation will be denied on this Domain Controller. Please look for other SAM event logs that may indicate the exact reason for the failure.

After going though the microsoft KB, it said :


RESOLUTION

Delete the replication links for the naming contexts in Windows 2000

In Windows 2000, you can restore a second domain controller to complete initial synchronization. If you cannot restore a second domain controller, you must either perform a metadata cleanup on the non-existent domain controllers or delete the replication links to the Active Directory naming contexts. If you plan to restore the other domain controllers later, you must delete the replication links instead of performing a metadata cleanup.
Before you can delete the replication links to the Active Directory naming contexts, you must identify the objectGUID value by using the Repadmin command. To do this, follow these steps:
1.      Click Start, click Run, type cmd in the Open box, and then click OK.      
2.      At the command prompt, type repadmin /showreps. You will see output that resembles the following:
CN=Schema,CN=Configuration,DC=contoso,DC=comDefault-First-Site-Name\DC02 via RPC objectGuid: 97c68f88-3864-4a12-9962-ca389937e237 Last attempt @ 2004-02-26 09:10.03 was successful.

CN=Configuration,DC=contoso,DC=com Default-First-Site-Name\DC02 via RPC objectGuid: 97c68f88-3864-4a12-9962-ca389937e237 Last attempt @ 2004-02-26 09:14.43 was successful.

DC=contoso,DC=com Default-First-Site-Name\DC02 via RPC objectGuid: 97c68f88-3864-4a12-9962-ca389937e237 Last attempt @ 2004-02-26 09:14.01 was successful.
3.      Type repadmin /delete to delete the replication links. Specify the naming context and the objectGUID as shown in the following examples:
repadmin /delete CN=Schema,CN=Configuration,DC=contoso,DC=com DC01 97c68f88-3864-4a12-9962-ca389937e237._msdcs.contoso.com /localonly
repadmin /delete CN=Configuration,DC=contoso,DC=com DC01 97c68f88-3864-4a12-9962-ca389937e237._msdcs.contoso.com /localonly
repadmin /delete DC=contoso,DC=com DC01 97c68f88-3864-4a12-9962-ca389937e237._msdcs.contoso.com /localonly
4.      Restart the RID Master computer. The RID Master will initialize correctly.      
(taken from http://support.microsoft.com/kb/839879 )

On the paragraph, it mentioned "If you cannot restore a second domain controller, you must either perform a metadata cleanup on the non-existent domain controllers or delete the replication links to the Active Directory naming contexts. "


So, my question is :

how do i know I have to do delete the replication link only or metacleanup only? or both?
0
Comment
Question by:binary_1001010
  • 3
  • 2
5 Comments
 
LVL 31

Accepted Solution

by:
Toni Uranjek earned 250 total points
ID: 21872005
Hi!

Metadata cleanup process is performed if domain controller goes ofline and is not restored. In this case you purge all its data from Active Directory. Your DC was restored and it is back online so you shouldn't perform metadata clean. Delete replication link, and trigger KCC to repair replication topology.

HTH

Toni
0
 
LVL 9

Author Comment

by:binary_1001010
ID: 21872059
hi toniur, how do i trigger KCC to repair replication topology?
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 21872099
You can use Active Directory Sites and Services or Replication Monitor from Support Tools. Comannd is called "Check replication topology" Or you can use command line:
"repadmin /kcc <dcservername>"
0
 
LVL 9

Author Comment

by:binary_1001010
ID: 21872864
just to confirm, where should we delete the replication ? the DC that we just restored or the DC without any problem?
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 21873125
On the DC that you've restored, but it really does not matter if you delete connection objects for this particular DC on other DCs, because KCC will generate new connection objects automatically.
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

A Bare Metal Image backup allows for the restore of an entire system to a similar or dissimilar hardware. They are highly useful for migrations and disaster recovery. Bare Metal Image backups support Full and Incremental backups. Differential backup…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

778 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question