DCdiag and sam error

[sony]

Hi

I have server 2000 with sp4 on it .I have two domain
controller in my network .One is a running simple
Directory services and other is my mail server.On my mail
server the dcdiag results are attched and on first domain
contoller the eeror massage are coming continuesly.Here is
the erroe massage of event log in first (PDC).In
operations masters.
Need Help to resolve the problem not able to join the
doimain with any client.Thanks in advance ....


The account-identifier allocator failed to initialize
properly. The record data contains the NT error code that
caused the failure. Windows 2000 will retry the
initialization until it succeeds; until that time, account
creation will be denied on this Domain Controller. Please
look for other SAM event logs that may indicate the exact
reason for the failure.

I am not able to join any computer to the domain and i


Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\MAIL
Starting test: Connectivity
......................... MAIL passed test
Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\MAIL
Starting test: Replications
......................... MAIL passed test
Replications
Starting test: NCSecDesc
......................... MAIL passed test
NCSecDesc
Starting test: NetLogons
......................... MAIL passed test
NetLogons
Starting test: Advertising
......................... MAIL passed test
Advertising
Starting test: KnowsOfRoleHolders
Warning: CN="NTDS Settings
DEL:3f99cbd8-594f-4ab8-8023-
1fd2e63375d1",CN=TOOK,CN=Servers,CN=Default-First-
Site-Name,CN=Sites,CN=Configuration,DC=tooknyc,DC=corp is
the Schema Owner, bu
t is deleted.
Warning: CN="NTDS Settings
DEL:3f99cbd8-594f-4ab8-8023-
1fd2e63375d1",CN=TOOK,CN=Servers,CN=Default-First-
Site-Name,CN=Sites,CN=Configuration,DC=tooknyc,DC=corp is
the PDC Owner, but i
s deleted.
Warning: CN="NTDS Settings
DEL:3f99cbd8-594f-4ab8-8023-
1fd2e63375d1",CN=TOOK,CN=Servers,CN=Default-First-
Site-Name,CN=Sites,CN=Configuration,DC=tooknyc,DC=corp is
the Rid Owner, but i
s deleted.
Warning: CN="NTDS Settings
DEL:3f99cbd8-594f-4ab8-8023-
1fd2e63375d1",CN=TOOK,CN=Servers,CN=Default-First-
Site-Name,CN=Sites,CN=Configuration,DC=tooknyc,DC=corp is
the Infrastructure U
pdate Owner, but is deleted.
......................... MAIL failed test
KnowsOfRoleHolders
Starting test: RidManager
Warning: FSMO Role Owner is deleted.
......................... MAIL passed test
RidManager
Starting test: MachineAccount
......................... MAIL passed test
MachineAccount
Starting test: Services
......................... MAIL passed test
Services
Starting test: ObjectsReplicated
......................... MAIL passed test
ObjectsReplicated
Starting test: frssysvol
Error: No record of File Replication System,
SYSVOL started.
The Active Directory may be prevented from
starting.
......................... MAIL passed test
frssysvol
Starting test: kccevent
......................... MAIL passed test
kccevent
Starting test: systemlog
......................... MAIL passed test
systemlog

Running enterprise tests on : tooknyc.corp
Starting test: Intersite
......................... tooknyc.corp passed
test Intersite
Starting test: FsmoCheck
Warning: DcGetDcName(PDC_REQUIRED) call failed,
error 1355
A Primary Domain Controller could not be located.
The server holding the PDC role is down.
......................... tooknyc.corp failed
test FsmoCheck

 

[Tim Hines [MSFT]]

Did you have another DC named TOOK that no longer exists? How was it
removed? If it was not successfully demoted you will need to perform a
metadata cleanup. TOOK currently owns several FSMO roles that should be
seized on your other DC (MAIL). Try seizing all of the FSMO roles to MAIL
to correct the problem with the roles. What error does the client receive
when attempting to join the domain? You should run the following diagnostic
utility against the DC after you correct the FSMO role problem. Review the
output for additional errors.
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd915706/MPSRPT_DirSvc.EXE

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[sony]

Tim First of all thanx so much for your very good response.
Took was crashed few dayz back.Stop_ error came in.Then i
reinstalled everything.I re-installed it as a additinal
domain controller.But later i rebooted mail.So all the
roles i think was trasffred to took .Then upto few dayz
PDC errors was coming.After that Sam erros was coming
continuesly.Now u want me to do something.I will tranfer
the roles of FSMO to mail.Is there anything i need to do.I
am getting the error Directory sevrices unable to allocate
relative relative indentifier .I am not able to creat a
user in Ad as well.


Sony

 

[Tim Hines [MSFT]]

Make sure that you have transferred the RID master role to mail first. Once
that is done you need to delete any old replication links to Took. The
repadmin /delete command will do this. Take a look at the following error
for more details on how to resolve the 16650.

839879 Event ID 16650: The account-identifier allocator failed to initialize
in
http://support.microsoft.com/?id=839879

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.