Problem with AD after restore

[Jason]

Over the weekend I had to re-install my windows 2000 server because I
had some issues with a disaster recovery. The server was part of the
AD, and was the RID, PDC, and Infrastructure operations master. When I
re-installed the OS, and ran DCPROMO to add the server to the AD,
everything went well. The AD seems to be replicating, but when I try to
add users or groups on the server, I get an error message "Windows
cannot create the object because: The directory service was unable to
allocate a relative identifier."

I've checked and done the recommended at
http://support.microsoft.com/default.aspx?kbid=822053

to no avail.

Could someone please help?

Thanks in advance.

 

[Chris I]

Check and make sure that AD knows were the RID Master is and well as the PDC
and Infrastructure masters. Sounds like you might need to sieze the RID
master role back to the DC. Microsoft has KB articles on how to sieze a
master role. Try it through the GUI first AD Users and Computers. If that
fails use the command line tool ntdsutil.exe.

 

[Jason]

Chris,

Thanks for the response. When I look on the server that I restored, it
thinks (as does the "BDC" that the server I restored is the master.
What should I be doing with ntdsutil?

What I'm thinking is to have my "BDC" take over all roles, demote the
current DC to a member server, removing it's info from the AD, then
running DCPROMO again to re-add it cleanly.

Any thoughts are appreciated.

Thanks,
Jason