No RID pool on new DCs

[gob]

The account-identifier allocator failed to initialize properly"

This is what I am getting on all new DCs that I promote into out domain.


I have done lots of google searches and it always seems to point to a DC that has been renamed or a DC that has been restored from a backup. The RID master has never been restored and I haven't re-promoted a server with the same name.

Replication seems to be working fine, but my event log is filling up with this SAM error.

I am mid migration at the moment, and have to migrate 3 new companies onto our domain over the next 3 weekends so this is kind of urgent.

Hope somebody can help?

Thanks

 

[ntinlin]

Perhaps transfer the RID role to another DC and see if that updates AD properly?

Neill

 

[pagy]

On a DC;
Netdom query fsmo

That will tell you which server has the RID Master role.
You could then follow ntinlin's advice or post back with the info from the above command.


All you need in this life is ignorance and confidence; then success is sure.
- Mark Twain

 

[gob]

I have transferred the RID Master Role to a server on a different site and all of my DCs now have a RID pool!

Thanks loads for your assistance.

 

[markdmac]

Gob,

Since that resolved your issue I would suggest you do some more digging and run Netdiag and DCDiag on each of your DCs to ensure all is working well.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript