Announcement

Collapse
No announcement yet.

WindowsServer 2003 .Cannot create Users/objects

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • WindowsServer 2003 .Cannot create Users/objects

    Hello
    I had two domain controllers running under windows server 2003 R2


    I demoted one DC which was old and was left with the other one


    However,

    I am getting this error whenever I try to create a user in the new DC


    Cannot create the object because
    directory service was unable to allocate a
    relative identifier


    With only one domain controller now,i did an fsmo check and realized
    all the five roles are with the new DC

    Pls guide me on how I can resolve this


    Regards

  • #2
    Re: WindowsServer 2003 .Cannot create Users/objects

    you need to seize the FSMO roles.
    There are plenty of guides on how to do this.
    Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

    Comment


    • #3
      Re: WindowsServer 2003 .Cannot create Users/objects

      And one of the best is only a couple of clicks from here:
      http://www.petri.com/transferring_fsmo_roles.htm
      Tom Jones
      MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
      PhD, MSc, FIAP, MIITT
      IT Trainer / Consultant
      Ossian Ltd
      Scotland

      ** Remember to give credit where credit is due and leave reputation points where appropriate **

      Comment


      • #4
        Re: WindowsServer 2003 .Cannot create Users/objects

        Okay...


        I had done an fsmo check , and saw that the new DC had all the roles..

        Do i transfer them again?

        Comment


        • #5
          Re: WindowsServer 2003 .Cannot create Users/objects

          I would, yes.
          Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

          Comment


          • #6
            Re: WindowsServer 2003 .Cannot create Users/objects

            Since i did a dcpromo demotion, i have only one DC..
            trying to transfer the rid master role
            gives me this error
            Ldap extended error message is 000020AF: SvcErr: DSID-0321093D, problem 5002 (UN
            AVAILABLE), data 8

            Win32 error returned is 0x20af(The requested FSMO operation failed. The current
            FSMO holder could not be contacted.)
            )
            Depending on the error code this may indicate a connection,
            ldap, or role transfer error.

            Comment


            • #7
              Re: WindowsServer 2003 .Cannot create Users/objects

              OK, so you will need to seize the FSMO - a last resort but since there is no way the original DC will return, it can be done
              Tom Jones
              MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
              PhD, MSc, FIAP, MIITT
              IT Trainer / Consultant
              Ossian Ltd
              Scotland

              ** Remember to give credit where credit is due and leave reputation points where appropriate **

              Comment


              • #8
                Re: WindowsServer 2003 .Cannot create Users/objects

                i have seized the rid master role.

                I am now able to create user...however when i try to log in i get this errror

                "there are currenty no logon servers availlable to service this request

                pls help

                Comment


                • #9
                  Re: WindowsServer 2003 .Cannot create Users/objects

                  It seems as if clients are still looking for the old DC

                  Ensure all traces have been removed from AD and DNS (in particular the SRV records)

                  Check clients are using the new DC for DNS
                  Tom Jones
                  MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                  PhD, MSc, FIAP, MIITT
                  IT Trainer / Consultant
                  Ossian Ltd
                  Scotland

                  ** Remember to give credit where credit is due and leave reputation points where appropriate **

                  Comment


                  • #10
                    Re: WindowsServer 2003 .Cannot create Users/objects

                    seize ALL FSMO roles, not just the RID master.
                    Then do a meta data cleanup, like Ossian said.

                    Both these processes can be found on the Petri KB
                    Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

                    Comment


                    • #11
                      Re: WindowsServer 2003 .Cannot create Users/objects

                      Thanks.

                      Did that and it helped.

                      The other issue was that i was using my ISP DNS in my Domain Controller Alternative DNS IP.

                      Removing it helped as well.

                      Comment


                      • #12
                        Re: WindowsServer 2003 .Cannot create Users/objects

                        thanks for telling us what your solution was!
                        Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

                        Comment


                        • #13
                          Re: WindowsServer 2003 .Cannot create Users/objects

                          cool

                          dhcp server is configured in the new DC.

                          however, despite clients being able to connect.. they have no internet access.

                          any ideas why this is the case?

                          Comment


                          • #14
                            Re: WindowsServer 2003 .Cannot create Users/objects

                            when i open dhcp in the server for the first time, i get its status is "not connected"

                            but upon clicking it, it changes to running..


                            any help appreciated

                            Comment


                            • #15
                              Re: WindowsServer 2003 .Cannot create Users/objects

                              How do you connect to the Internet? Do you use a router?

                              You need to configure the machines so that the router's IP address, or the IP address of the NIC on the server that connects to the Internet is entered as the default gateway in the appropriate DHCP scope option.


                              How is DNS setup on your network?

                              Is a DNS server configured on the domain controller? If so, make sure that the IP address of the DNS server is used as the DNS server entry for the clients and the server itself. Apart from the server where you do this manually, the DNS server address can be configured for the clients via the relevant DHCP scope option.
                              A recent poll suggests that 6 out of 7 dwarfs are not happy

                              Comment

                              Working...
                              X