• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 218
  • Last Modified:

windows 2003 AD issues

users not able to log into the DC.
when i perfom a netdiag i see an entry of
kerberos authentication failed
please advise?
when a user attempts to login we get a message of a trust relationship issue?
  • 2
  • 2
1 Solution
schuitkdsAuthor Commented:
also get some messages stating
Naming information cannot be located  --- the server is not operational
David Johnson, CD, MVPOwnerCommented:
kerebos errors usually have to do with time being off between the client and the server (>15 Minutes Difference)
Raj-GTSystems EngineerCommented:
As David mentioned, it is usually caused by timing issues. Check the time and more importantly the timezone settings on your server and clients.
schuitkdsAuthor Commented:
now i get an error message of
Windows cannot create the object <user> because: The directory service was unable to allocate a relative identifier.
I know this was a replication issue
I had 2 DC's  
I had to power off the second DC and do a system state restore to the Primary DC to reestablish the objects in AD.

can i wipe out the reference to the secondary AD and make the system think it has only the Primary DC and establish full functionality. If so how?  
 If i can i would reformat the secondary DC and reinstall the OS and rejoin to domain and once again make it DC at that point.

If i can not wipe out the secondary DC, how do i force the secondary DC to accept replication from the primary DC alone ( one way replication)  and block the replication of the secondary DC info up to the primary DC.
i believe the secondary DC may have been faulty and pushed old AD info up to the primary DC which initiated all the issues.
Thanks in advance
Raj-GTSystems EngineerCommented:
Have you transferred all the FSMO roles to this dc?
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now