标题: win2000域控制器错误码----无法创建账号!!!!!!!!! [打印本页] 作者: azhao 时间: 2005-1-10 18:23 标题: win2000域控制器错误码----无法创建账号!!!!!!!!! 1.账号加入域时,提示"目录服务无法分配相对标识号"<br>
2.同时,也无法在两台win2000域服务器上创建账号.<br>
3.服务器已干活一年有余.<br>
4.其中一个错误日志.<br>
Event Type: Error<br>
Event Source: NTDS KCC<br>
Event Category: (1)<br>
Event ID: 1311<br>
Date: 1/10/2005<br>
Time: 5:49:29 PM<br>
User: N/A<br>
Computer: WIN2000S<br>
Description:<br>
The Directory Service consistency checker has determined that either (a) there is not enough physical connectivity published via the Active Directory Sites and Services Manager to create a spanning tree connecting all the sites containing the Partition DC=olympic,DC=com, or (b) replication cannot be performed with one or more critical servers in order for changes to propagate across all sites (most often due to the servers being unreachable). <br>
<br>
For (a), please use the Active Directory Sites and Services Manager to do one of the following: <br>
1. Publish sufficient site connectivity information such that the system can infer a route by which this Partition can reach this site. This option is preferred. <br>
2. Add an ntdsConnection object to a Domain Controller that contains the Partition DC=olympic,DC=com in this site from a Domain Controller that contains the same Partition in another site. <br>
<br>
For (b), please see previous events logged by the NTDS KCC source that identify the servers that could not be contacted. 作者: ７９００５９ 时间: 2005-1-10 20:33 标题: re:請看kb:http://suppor... 請看kb:<br>
<a target=_blank href=http://support.microsoft.com/default.aspx?scid=kb>http://support.microsoft.com/default.aspx?scid=kb</a>;zh-cn;307593<br>
<a target=_blank href=http://support.microsoft.com/default.aspx?scid=kb>http://support.microsoft.com/default.aspx?scid=kb</a>;zh-cn;819249作者: azhao 时间: 2005-1-10 21:18 标题: re:事件类型: 信息事件来源: SAM... 事件类型: 信息<br>
事件来源: SAM<br>
事件种类: 无<br>
事件 ID: 16647<br>
日期: 2004-11-26<br>
事件: 11:00:59<br>
用户: N/A<br>
计算机: EX<br>
描述:<br>
The domain controller is starting a request for a new account-identifier pool.<br>
<br>
有关更多信息，请参阅在 <a target=_blank href=http://go.microsoft.com/fwlink/events.asp>http://go.microsoft.com/fwlink/events.asp</a> 的帮助和支持中心。<br> 作者: azhao 时间: 2005-1-10 21:19 标题: re:事件类型: 错误事件来源: SAM... 事件类型: 错误<br>
事件来源: SAM<br>
事件种类: 无<br>
事件 ID: 16645<br>
日期: 2005-1-10<br>
事件: 17:31:39<br>
用户: N/A<br>
计算机: EXCH<br>
描述:<br>
The maximum account identifier allocated to this domain controller has been assigned. The domain controller has failed to obtain a new identifier pool. A possible reason for this is that the domain controller has been unable to contact the master domain controller. Account creation on this controller will fail until a new pool has been allocated. There may be network or connectivity problems in the domain, or the master domain controller may be offline or missing from the domain. Verify that the master domain controller is running and connected to the domain.<br>
<br>
有关更多信息，请参阅在 <a target=_blank href=http://go.microsoft.com/fwlink/events.asp>http://go.microsoft.com/fwlink/events.asp</a> 的帮助和支持中心。<br>
数据:<br>
0000: a8 02 00 c0 ¨..作者: ７９００５９ 时间: 2005-1-11 08:57 标题: re:http://support.micro... <a target=_blank href=http://support.microsoft.com/default.aspx?scid=kb>http://support.microsoft.com/default.aspx?scid=kb</a>;zh-cn;316201作者: azhao 时间: 2005-1-11 10:17 标题: re:非常感谢.我会认真研究一下. 非常感谢.<br>
我会认真研究一下.作者: azhao 时间: 2005-1-11 10:28 标题: re:版主老大.文章我已经看了.但是服务器... 版主老大.<br>
文章我已经看了.但是服务器关系到全公司100多台电脑登陆问题.<br>
为了安全,针对16645事件,你能帮我介绍一下增加 new account-identifier pool的方法吗?<br>
打扰之处,甚感不安!作者: ７９００５９ 时间: 2005-1-11 10:47 标题: re:我想你的问题最终可能是rid主机出了问题... 我想你的问题最终可能是rid主机出了问题,导致不能添加对象.但是都是有可能rid池用完导致不可建帐户可以通过修改注册表的方法解决.kb:<a target=_blank href=http://support.microsoft.com/default.aspx?scid=kb>http://support.microsoft.com/default.aspx?scid=kb</a>;zh-cn;316201作者: azhao 时间: 2005-1-11 20:00 标题: re:我把原值由500变为1000还是不行??... 我把原值由500变为1000还是不行????<br>
咋办???作者: ７９００５９ 时间: 2005-1-11 20:46 标题: re:用netdiag.exe测试rid有没失... 用netdiag.exe测试rid有没失效.作者: azhao 时间: 2005-1-12 14:26 标题: re:用dcdiag.exe 测试如下.net... 用dcdiag.exe 测试如下.netdiag的没贴.<br>
C:\>dcdiag<br>
<br>
Domain Controller Diagnosis<br>
<br>
Performing initial setup:<br>Done gathering initial info.<br>
<br>
Doing initial required tests<br>
<br>Testing server: FUYONG\w2s<br>Starting test: Connectivity<br>......................... w2s passed test Connecti<br>
<br>
Doing primary tests<br>
<br>Testing server: FUYONG\w2s<br>Starting test: Replications<br>......................... w2s passed test Replicat<br>Starting test: NCSecDesc<br>......................... w2s passed test NCSecDes<br>Starting test: NetLogons<br>......................... w2s passed test NetLogon<br>Starting test: Advertising<br>Server w2s is advertising as a global catalog, but<br>it could not be verified that the server thought it was a GC<br>......................... w2s failed test Advertis<br>Starting test: KnowsOfRoleHolders<br>......................... w2s passed test KnowsOfR<br>Starting test: RidManager<br>No rids allocated -- please check eventlog.<br>......................... w2s passed test RidManag<br>Starting test: MachineAccount<br>......................... w2s passed test MachineA<br>Starting test: Services<br>SMTPSVC Service is stopped on [w2s]<br>......................... w2s failed test Services<br>Starting test: ObjectsReplicated<br>......................... w2s passed test ObjectsR<br>Starting test: frssysvol<br>......................... w2s passed test frssysvo<br>Starting test: kccevent<br>An Error Event occured. EventID: 0xC000051F<br>Time Generated: 01/12/2005 13:58:30<br>(Event String could not be retrieved)<br>An Error Event occured. EventID: 0xC000051F<br>Time Generated: 01/12/2005 13:58:30<br>(Event String could not be retrieved)<br>......................... w2s failed test kccevent<br>Starting test: systemlog<br>An Error Event occured. EventID: 0x0000410A<br>Time Generated: 01/12/2005 13:12:27<br>(Event String could not be retrieved)<br>An Error Event occured. EventID: 0x0000410A<br>Time Generated: 01/12/2005 13:43:27<br>(Event String could not be retrieved)<br>......................... w2s failed test systemlo<br>
<br>Running enterprise tests on : olym.com<br>Starting test: Intersite<br>......................... olym.com passed test Intersite<br>Starting test: FsmoCheck<br>Error: A GC returned by DsGetDcName() was not a GC in it's d<br>Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355<br>A Primary Domain Controller could not be located.<br>The server holding the PDC role is down.<br>......................... olym.com failed test FsmoCheck<br>
<br>
C:\><br>
<br> 作者: ７９００５９ 时间: 2005-1-12 15:33 标题: re:从上面dcdiag\\看来是你的站点复制... 从上面dcdiag\\看来是你的站点复制有问题阿.你的域控制器可以在站点内复制吗?作者: azhao 时间: 2005-1-12 16:16 标题: re:公司有两台域控制器,刚才我试了一下,在一... 公司有两台域控制器,刚才我试了一下,在一台上做的更改在另一台上也会自动改变.