pks425 发表于 2007-1-3 21:40:12

我不能建立用户了

昨天,我的AD(DC-01)挂掉了,还好我之前有做一个“额外域”DC-02。所以我换了新的硬盘重新做了DC-01。重新做好以后,因为不懂GC是什么东东,搞了半天都没有把exchange Server 的服务启起来。后来是别人的指点下才搞定,本以为一切都OK了,可今天又出现新的问题了,系统总是报错:“The account-identifier allocator failed to initialize properly.The record data contains the NT error code that caused the failure.Windows 2000 will retry the initialization until it succeeds; until that time, account creation will be denied on this Domain Controller.Please look for other SAM event logs that may indicate the exact reason for the failure. ”去建立用户发现也不行,请问这是什么原因,我在怎么做,求求大侠帮忙????

pks425 发表于 2007-1-3 21:44:18

出错现象:

出错现象:

砸锅卖铁 发表于 2007-1-3 21:57:16

FSMO角色

pks425 发表于 2007-1-3 22:09:13

能在具体一点吗?我不太懂,说说要怎么操作?谢谢!

砸锅卖铁 发表于 2007-1-3 22:46:08

DC-01挂掉之前是否具有5个FSMO角色?目前FSMO角色是否存在?
下面这个链接和你的错误一样
http://support.microsoft.com/kb/839879/en-us

pks425 发表于 2007-1-4 14:34:34

能帮我看看吗,我看不懂是什么意思

C:\>dcdiag /v
Domain Controller Diagnosis
Performing initial setup:
   * Verifying that the local machine gh-dc-01, is a DC.
   * Connecting to directory service on server gh-dc-01.
   * Collecting site info.
   * Identifying all servers.
   * Found 2 DC(s). Testing 1 of them.
   Done gathering initial info.
Doing initial required tests
   Testing server: Default-First-Site-Name\GH-DC-01
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         * Active Directory RPC Services Check
         ......................... GH-DC-01 passed test Connectivity
Doing primary tests
   Testing server: Default-First-Site-Name\GH-DC-01
      Starting test: Replications
         * Replications Check
         ......................... GH-DC-01 passed test Replications
      Test omitted by user request: Topology
      Test omitted by user request: CutoffServers
      Starting test: NCSecDesc
         * Security Permissions Check for
         CN=Schema,CN=Configuration,DC=ghinghong,DC=corpnet
         * Security Permissions Check for
         CN=Configuration,DC=ghinghong,DC=corpnet
         * Security Permissions Check for
         DC=ghinghong,DC=corpnet
         ......................... GH-DC-01 passed test NCSecDesc
      Starting test: NetLogons
         * Network Logons Privileges Check
         ......................... GH-DC-01 passed test NetLogons
      Starting test: Advertising
         The DC GH-DC-01 is advertising itself as a DC and having a DS.
         The DC GH-DC-01 is advertising as an LDAP server
         The DC GH-DC-01 is advertising as having a writeable directory
         The DC GH-DC-01 is advertising as a Key Distribution Center
         The DC GH-DC-01 is advertising as a time server
         The DS GH-DC-01 is advertising as a GC.
         ......................... GH-DC-01 passed test Advertising
      Starting test: KnowsOfRoleHolders
         Role Schema Owner = CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet
         Warning: CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet is the Schema Owne
r, but is deleted.
         Role Domain Owner = CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet
         Warning: CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet is the Domain Owne
r, but is deleted.
         Role PDC Owner = CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet
         Warning: CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet is the PDC Owner,
but is deleted.
         Role Rid Owner = CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet
         Warning: CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet is the Rid Owner,
but is deleted.
         Role Infrastructure Update Owner = CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet
         Warning: CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet is the Infrastruct
ure Update Owner, but is deleted.
         ......................... GH-DC-01 failed test KnowsOfRoleHolders
      Starting test: RidManager
         * Available RID Pool for the Domain is 4107 to 1073741823
         Warning: FSMO Role Owner is deleted.
         * gh-dc-01.ghinghong.corpnet is the RID Master
         * DsBind with RID Master was successful
         Warning: rid set reference is deleted.
         ldap_search_sW of CN=RID Set\
DEL:9fb372c6-b8fa-4a85-9a98-5c1d2da15bf2,CN=Deleted Objects,DC=ghinghong,DC=corp
net for rid info failed with 2: The system cannot find the file specified.
         ......................... GH-DC-01 failed test RidManager
      Starting test: MachineAccount
         * SPN found :LDAP/gh-dc-01.ghinghong.corpnet/ghinghong.corpnet
         * SPN found :LDAP/gh-dc-01.ghinghong.corpnet
         * SPN found :LDAP/GH-DC-01
         * SPN found :LDAP/gh-dc-01.ghinghong.corpnet/GHINGHONG
         * SPN found :LDAP/e552fa41-5c77-4eb1-9bd0-3ee2589d3d6f._msdcs.ghinghong
.corpnet
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/e552fa41-5c77-4eb1-9b
d0-3ee2589d3d6f/ghinghong.corpnet
         * SPN found :HOST/gh-dc-01.ghinghong.corpnet/ghinghong.corpnet
         * SPN found :HOST/gh-dc-01.ghinghong.corpnet
         * SPN found :HOST/GH-DC-01
         * SPN found :HOST/gh-dc-01.ghinghong.corpnet/GHINGHONG
         * SPN found :GC/gh-dc-01.ghinghong.corpnet/ghinghong.corpnet
         ......................... GH-DC-01 passed test MachineAccount
      Starting test: Services
         * Checking Service: Dnscache
         * Checking Service: NtFrs
         * Checking Service: IsmServ
         * Checking Service: kdc
         * Checking Service: SamSs
         * Checking Service: LanmanServer
         * Checking Service: LanmanWorkstation
         * Checking Service: RpcSs
         * Checking Service: RPCLOCATOR
         * Checking Service: w32time
         * Checking Service: TrkWks
         * Checking Service: TrkSvr
         * Checking Service: NETLOGON
         * Checking Service: Dnscache
            Could not open IISADMIN Service on :failed with 1060: The
specified service does not exist as an installed service.
         * Checking Service: NtFrs
            Could not open SMTPSVC Service on :failed with 1060: The s
pecified service does not exist as an installed service.
         ......................... GH-DC-01 failed test Services
      Test omitted by user request: OutboundSecureChannels
      Starting test: ObjectsReplicated
         GH-DC-01 is in domain DC=ghinghong,DC=corpnet
         Checking for CN=GH-DC-01,OU=Domain Controllers,DC=ghinghong,DC=corpnet
in domain DC=ghinghong,DC=corpnet on 1 servers
            Object is up-to-date on all servers.
         Checking for CN=NTDS Settings,CN=GH-DC-01,CN=Servers,CN=Default-First-S
ite-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet in domain CN=Configur
ation,DC=ghinghong,DC=corpnet on 1 servers
            Object is up-to-date on all servers.
         ......................... GH-DC-01 passed test ObjectsReplicated
      Starting test: frssysvol
         * The File Replication Service Event log test
         Error: No record of File Replication System, SYSVOL started.
         The Active Directory may be prevented from starting.
         ......................... GH-DC-01 passed test frssysvol
      Starting test: kccevent
         * The KCC Event log test
         Found no KCC errors in Directory Service Event log in the last 15 minut
es.
         ......................... GH-DC-01 passed test kccevent
      Starting test: systemlog
         * The System Event log test
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:12:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:14:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:16:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:18:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:20:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:22:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:24:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:26:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:28:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:30:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:32:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:34:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:36:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:38:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:40:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:42:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:44:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:46:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:48:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:50:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:52:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:54:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:56:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   13:58:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x00000457
            Time Generated: 01/04/2007   13:58:53
            Event String: Driver Canon i6500 required for printer
__print_Canon i6500 is unknown. Contact the
administrator to install the driver before you
log in again.
         An Error Event occured.EventID: 0x00000452
            Time Generated: 01/04/2007   13:58:53
            Event String: The printer could not be installed.
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   14:00:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   14:02:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   14:04:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   14:06:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   14:08:12
            (Event String could not be retrieved)
         An Error Event occured.EventID: 0x0000410A
            Time Generated: 01/04/2007   14:10:12
            (Event String could not be retrieved)
         ......................... GH-DC-01 failed test systemlog
   Running enterprise tests on : ghinghong.corpnet
      Starting test: Intersite
         Skipping site Default-First-Site-Name, this site is outside the scope
         provided by the command line arguments provided.
         ......................... ghinghong.corpnet passed test Intersite
      Starting test: FsmoCheck
         GC Name: \\gh-dc-01.ghinghong.corpnet
         Locator Flags: 0xe00001fc
         Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355
         A Primary Domain Controller could not be located.
         The server holding the PDC role is down.
         Time Server Name: \\gh-dc-01.ghinghong.corpnet
         Locator Flags: 0xe00001fc
         Preferred Time Server Name: \\gh-dc-01.ghinghong.corpnet
         Locator Flags: 0xe00001fc
         KDC Name: \\gh-dc-01.ghinghong.corpnet
         Locator Flags: 0xe00001fc
         ......................... ghinghong.corpnet failed test FsmoCheck
C:\>

pks425 发表于 2007-1-4 14:52:15

回复 #5 砸锅卖铁 的帖子

DC-01之前是5 个,可现在我就不清楚了,如果不在,要怎么加上去。5555

peng3 发表于 2007-1-17 13:18:09

随便找一下fsmo的五种角色转移的方法吧
不过你转移时要用那个size。。什么的,因为你的主控不存在了

jaffas1101 发表于 2007-1-17 15:06:13

好长!!!
页: [1]
查看完整版本: 我不能建立用户了