Error message 16650

[Jim]

In the Event log I am getting an error number of 16650-
Source SAM. The description is The aacount-identifier
allocator failed to intialize properly. The record data
contains the NT error code that caused the failure.
Windows 2000 may retry the initialization until it
succeeds; until that time, account creation will be denied
on this Domain Controller.

I am new to this organization so I don't know all the
details yet, but this is on a 2000 domain controller using
active directory moved from an NT 4.0 domain controller.
Which was on another machine

How do you find out which roles are on which server

Also I appreciate any help resolving this problem

 

[Simon Geary]

This error indicates a possible problem with the RID Master FSMO role. Check
which server holds this role and that it is contactable by all your other
DC's.
http://support.microsoft.com/?id=234790