Cannote create new account

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Fabian - 03 Jul 2008 20:25 GMT

When I try to create a new user in active directory I recive de message error
"Windows Cannot create the objet because the directory service was unable to
allocate a relative identifier"

In the past I had 2 domain servers, and I put offline the master domain
server.

Reply to this Message

Meinolf Weber - 03 Jul 2008 20:30 GMT

Hello Fabian,

Thats the reason, the RID pool of the existing is empty, hopefully the other
one is not longer offline then 60 days?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> When I try to create a new user in active directory I recive de
> message error "Windows Cannot create the objet because the directory
> service was unable to allocate a relative identifier"
>
> In the past I had 2 domain servers, and I put offline the master
> domain server.

Reply to this Message

Richard Mueller [MVP] - 03 Jul 2008 20:35 GMT

> When I try to create a new user in active directory I recive de message
> error
[quoted text clipped - 4 lines]
> In the past I had 2 domain servers, and I put offline the master domain
> server.

It sounds like you don't have a RID master, the DC that allocates pools of
Relative ID's to the other DC's. When you demote a DC you must first
transfer any of the FSMO roles held by that DC to other DC's. If it's too
late for that you must seize the roles on other DC's.

Research FSMO (Flexible Single Master Operations) roles. These are:
1. Schema Master (one per forest)
2. Domain Naming Master (one per forest)
3. PDC Emulator (one per domain)
4. RID Master (one per domain)
5. Infrastructure Master (one per domain)

If you can, bring make the DC you took offline. If you want to retire it
find out which FSMO roles it has and transfer them elsewhere.

Signature

Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

Reply to this Message

Paul Bergson [MVP-DS] - 07 Jul 2008 13:58 GMT

Run the following and open up dcdiag.log and look for errors

DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log

Signature

Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

> When I try to create a new user in active directory I recive de message
> error
[quoted text clipped - 4 lines]
> In the past I had 2 domain servers, and I put offline the master domain
> server.

Reply to this Message