Announcement

Collapse
No announcement yet.

Active Directory Restoring

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Active Directory Restoring

    After Restoring active directory iam getting error when user creating or adding domain
    error is The directory service was unable to allocate a relative identifier" on RID Master

    how to resolve the issue nd let me know if you have any concerns.
    Thanks,
    -Subramanyam

  • #2
    Tell us more about your environment please - one DC or many?
    Check the FSMO roles and the servers they are on exist
    Check for GC servers

    What happened to cause the restore?
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      My environment is Windows Server 2012 R2
      PS C:\Users\TEMP> netdom query FSMO
      Schema master DC1.test.com
      Domain naming master DC1.test.com
      PDC DC1.test.com
      RID pool manager DC1.test.com
      Infrastructure master DC2.test.com
      The command completed successfully.

      3. GC servers yes

      after restoring AD when iam creating user account or joining the domain getting the error The directory service was unable to allocate a relative identifier" on RID Master

      Comment


      • #4
        Yes, we know what the error is, but please answer the questions asked!
        Since the RIDmaster is on DC1, can you create users on that, but not DC2?
        Which DC was restored?
        What caused you to have to restore?
        Tom Jones
        MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
        PhD, MSc, FIAP, MIITT
        IT Trainer / Consultant
        Ossian Ltd
        Scotland

        ** Remember to give credit where credit is due and leave reputation points where appropriate **

        Comment


        • #5
          i can create user in DC1
          DC2 was restored

          Comment


          • #6
            OK, so the restored DC2 is not talking to DC1 properly.
            Rather than troubleshooting it, I suggest you blow it away (try unpromo, but likely to have to kill the OS and do a metadata cleanup on DC1 (deleting the computer account for DC2) then build a new machine, join the domain and promote to a new DC
            Tom Jones
            MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
            PhD, MSc, FIAP, MIITT
            IT Trainer / Consultant
            Ossian Ltd
            Scotland

            ** Remember to give credit where credit is due and leave reputation points where appropriate **

            Comment

            Working...
            X