Event ID: 16650 account-identifier allocator failed

[mfrosolone]

I continually have the same problem whenever I setup two Windows 2000 Advanced Servers. One is setup with AD as the PDC - reboot and everything is fine. I then setup the second server to be an additional domain controller and I receive the error RPC is unavailable. I get around that by editing the HOSTS file....AD is now being installed and being added as the additional DC, once rebooted I am able to logon with the Admin account, able to view and use shares located on my other server (DC1) but my DNS shuts down and says it's unavailable as well as the below error. Can you guide me in the right direction as to where to find a resolution for this. This would be greatly appreciated. I beleive I am looking in the wrong areas. Thanks.

Event Type: Error
>
>
> Event Source: SAM
> Event Category: None
> Event ID: 16650
> Date: xx/xx/xxxx
> Time: x:xx:xx PM
> User: N/A
> Computer: xxxxxxxx
>
> Description:
> The account-identifier allocator failed to initialize properly. The
record data contains the NT error code that caused the failure. Windows
2000 will retry the initialization until it succeeds; until that time,
account creation will be denied on this Domain Controller. Please look for
other SAM event logs that may indicate the exact reason for the failure.
> Data:
> 0000: a7 02 00 c0 §..À

 

[gbiello]

Sounds like one or more of the services (like RPC) on DC1 is not started. Check them out to make sure they're all started. Also check out the event log there. It sounds like your trouble is on DC1. Is the second computer listed in the 'Domain Controllers' OU in AD Users and Computers?

You can check out Q248410. I'm sure your RID master is DC1 though.

Another thought from EventID.net: This behavior can also occur when the User Right "Access this computer from the network" has not been given to the appropriate groups such as Enterprise Domain Controllers or Authenticated Users.

-gbiello