Unable to create account in one of the DC

[Ryan]

Good day,

I get this error message while attempting on creating new user in DC1 (I
have DC1(PDC) and DC2 (Additional DC) in this domain): "windows cannot set
the password for <user account name> because: The specified active directory
object is not bound to a remote resource". I can create an account at DC2
and let it replicate to DC1; I would have to go to DC1 and use the Exchange
Task to create mailbox.

I have read similar article posted and this was suspected to be RID pool
corruption.

Questions:
1) What is the consequence of doing thing this way (use Additional DC to
create user account and let it replicate instead of using PDC), would this
lead to even major problem?
2) If I were to restore old system state, should I do authoritative or
non-authoritative restore? Please advice, because this is also our Exchange
Server and it is very critical.
3) Is there a tool to fix the RID pool. If I were to do a dcpromo, what
are the steps and precautions to take (please remember this is the PDC)?

Thank you very much.

 

[Mohana Vamsi]

I would like to suggest to you run "netdiag.exe /fix" on
the dc where you have problem.

you can get netdiag.exe from microsoft website.

Vamsi.