win2000域控制器错误码----无法创建账号!!!!!!!!!

azhao

1.账号加入域时,提示"目录服务无法分配相对标识号"<br>
2.同时,也无法在两台win2000域服务器上创建账号.<br>
3.服务器已干活一年有余.<br>
4.其中一个错误日志.<br>
Event Type: Error<br>
Event Source: NTDS KCC<br>
Event Category: (1)<br>
Event ID: 1311<br>
Date: 1/10/2005<br>
Time: 5:49:29 PM<br>
User: N/A<br>
Computer: WIN2000S<br>
Description:<br>
The Directory Service consistency checker has determined that either (a) there is not enough physical connectivity published via the Active Directory Sites and Services Manager to create a spanning tree connecting all the sites containing the Partition DC=olympic,DC=com, or (b) replication cannot be performed with one or more critical servers in order for changes to propagate across all sites (most often due to the servers being unreachable). <br>
<br>
For (a), please use the Active Directory Sites and Services Manager to do one of the following: <br>
1. Publish sufficient site connectivity information such that the system can infer a route by which this Partition can reach this site. This option is preferred. <br>
2. Add an ntdsConnection object to a Domain Controller that contains the Partition DC=olympic,DC=com in this site from a Domain Controller that contains the same Partition in another site. <br>
<br>
For (b), please see previous events logged by the NTDS KCC source that identify the servers that could not be contacted.

７９００５９

請看kb:<br>
<a target=_blank href=http://support.microsoft.com/default.aspx?scid=kb>http://support.microsoft.com/default.aspx?scid=kb</a>;zh-cn;307593<br>
<a target=_blank href=http://support.microsoft.com/default.aspx?scid=kb>http://support.microsoft.com/default.aspx?scid=kb</a>;zh-cn;819249

azhao

事件类型: 信息<br>
事件来源: SAM<br>
事件种类: 无<br>
事件 ID: 16647<br>
日期: 2004-11-26<br>
事件: 11:00:59<br>
用户: N/A<br>
计算机: EX<br>
描述:<br>
The domain controller is starting a request for a new account-identifier pool.<br>
<br>
有关更多信息，请参阅在 <a target=_blank href=http://go.microsoft.com/fwlink/events.asp>http://go.microsoft.com/fwlink/events.asp</a> 的帮助和支持中心。<br>

azhao

事件类型: 错误<br>
事件来源: SAM<br>
事件种类: 无<br>
事件 ID: 16645<br>
日期: 2005-1-10<br>
事件: 17:31:39<br>
用户: N/A<br>
计算机: EXCH<br>
描述:<br>
The maximum account identifier allocated to this domain controller has been assigned. The domain controller has failed to obtain a new identifier pool. A possible reason for this is that the domain controller has been unable to contact the master domain controller. Account creation on this controller will fail until a new pool has been allocated. There may be network or connectivity problems in the domain, or the master domain controller may be offline or missing from the domain. Verify that the master domain controller is running and connected to the domain.<br>
<br>
有关更多信息，请参阅在 <a target=_blank href=http://go.microsoft.com/fwlink/events.asp>http://go.microsoft.com/fwlink/events.asp</a> 的帮助和支持中心。<br>
数据:<br>
0000: a8 02 00 c0 ¨..

７９００５９

<a target=_blank href=http://support.microsoft.com/default.aspx?scid=kb>http://support.microsoft.com/default.aspx?scid=kb</a>;zh-cn;316201

azhao

非常感谢.<br>
我会认真研究一下.

azhao

版主老大.<br>
文章我已经看了.但是服务器关系到全公司100多台电脑登陆问题.<br>
为了安全,针对16645事件,你能帮我介绍一下增加 new account-identifier pool的方法吗?<br>
打扰之处,甚感不安!

７９００５９

我想你的问题最终可能是rid主机出了问题,导致不能添加对象.但是都是有可能rid池用完导致不可建帐户可以通过修改注册表的方法解决.kb:<a target=_blank href=http://support.microsoft.com/default.aspx?scid=kb>http://support.microsoft.com/default.aspx?scid=kb</a>;zh-cn;316201

azhao

我把原值由500变为1000还是不行????<br>
咋办???

７９００５９

用netdiag.exe测试rid有没失效.