SAM Error in System Log

[R Scholl]

I had to transfer the domain controller to this server.
I did this by replicating from the old server to a
temporary server, then from that temporary server to the
new one. Now I get the following error in the System
Log. Any ideas what I need to do to fix it? Thanks for
the help!

Event Type: Error
Event Source: SAM
Event Category: None
Event ID: 16650
Date: 7/2/2003
Time: 11:44:38 AM
User: N/A
Computer: SERVER01
Description:
The account-identifier allocator failed to initialize
properly. The record data contains the NT error code
that caused the failure. Windows 2000 will retry the
initialization until it succeeds; until that time,
account creation will be denied on this Domain
Controller. Please look for other SAM event logs that
may indicate the exact reason for the failure.
Data:
0000: a7 02 00 c0 §..À

 

[Matjaz Ladava]

This means, that you forget to transfer FSMO roles to another server, before
you decommissioned the old one. Use netdom query FSMO to see which server is
holding which FSMO role. In your case RID master is not available, so you
have to use seize procedure to seize RID master to another server. You do
this, by going to the command line and enter ntdsutil
from there you go to the roles section and use appropriate seize command.
Beware, when you seize RID master, Domain Naming Master and Schema Master
those old servers must never come back online and must be reinstalled.

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000)
(e-mail address removed)
http://ladava.com

I had to transfer the domain controller to this server.
I did this by replicating from the old server to a
temporary server, then from that temporary server to the
new one. Now I get the following error in the System
Log. Any ideas what I need to do to fix it? Thanks for
the help!

Event Type: Error
Event Source: SAM
Event Category: None
Event ID: 16650
Date: 7/2/2003
Time: 11:44:38 AM
User: N/A
Computer: SERVER01
Description:
The account-identifier allocator failed to initialize
properly. The record data contains the NT error code
that caused the failure. Windows 2000 will retry the
initialization until it succeeds; until that time,
account creation will be denied on this Domain
Controller. Please look for other SAM event logs that
may indicate the exact reason for the failure.
Data:
0000: a7 02 00 c0 §..À

 

[R Scholl]

Since this server and the original AD server have the
same name and address, am I going to have to use a third
server like I did to get all of the domain users and
computers infromation onto the new server?

Thanks,
Rich Scholl