windows 2003 AD issues

users not able to log into the DC.
when i perfom a netdiag i see an entry of
kerberos authentication failed
please advise?
when a user attempts to login we get a message of a trust relationship issue?
schuitkdsAsked:
Who is Participating?
 
Raj-GTConnect With a Mentor Systems EngineerCommented:
As David mentioned, it is usually caused by timing issues. Check the time and more importantly the timezone settings on your server and clients.
0
 
schuitkdsAuthor Commented:
also get some messages stating
Naming information cannot be located  --- the server is not operational
0
 
David Johnson, CD, MVPOwnerCommented:
kerebos errors usually have to do with time being off between the client and the server (>15 Minutes Difference)
0
 
schuitkdsAuthor Commented:
now i get an error message of
Windows cannot create the object <user> because: The directory service was unable to allocate a relative identifier.
I know this was a replication issue
I had 2 DC's  
I had to power off the second DC and do a system state restore to the Primary DC to reestablish the objects in AD.

can i wipe out the reference to the secondary AD and make the system think it has only the Primary DC and establish full functionality. If so how?  
 If i can i would reformat the secondary DC and reinstall the OS and rejoin to domain and once again make it DC at that point.

If i can not wipe out the secondary DC, how do i force the secondary DC to accept replication from the primary DC alone ( one way replication)  and block the replication of the secondary DC info up to the primary DC.
i believe the secondary DC may have been faulty and pushed old AD info up to the primary DC which initiated all the issues.
Thanks in advance
0
 
Raj-GTSystems EngineerCommented:
Have you transferred all the FSMO roles to this dc?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.