RE: [ActiveDir] Event id 16650

[mathif]

Title: Message

Hi Rick,

I have followed this article and done the meta cleanup + ADSIEDIT.

Thanks for the article but still the problem continues and I cant see all the DNS records.

Thanks for the help.

Athif

-----Original Message-----
From: Rick Kingslan [mailto:[EMAIL PROTECTED]
Sent: Sunday, 25 April 2004 5:48 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Event id 16650

Hmmm.  This usually means that the records and entries that make a machine a domain controller in Active Directory exist, but there is no machine.  This seems to be the case here.  You will have to get into the metadata of Active Directory and remove the object entries for the machine that wasn't properly promoted / demoted.

 

Not a big deal - the directions on what do are right here:

 

http://support.microsoft.com/default.aspx?kbid=216498

 

Once done, however, make sure that you go back through DNS and remove any records for the old DC.

 

Rick Kingslan  MCSE, MCSA, MCT, CISSP
Microsoft MVP:
Windows Server / Directory Services
Windows Server / Rights Management
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone
WebLog - www.msmvps.com/willhack4food
 

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Sunday, April 25, 2004 7:15 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Event id 16650

Dear Experts,
I am getting this event id 16650. Actually, itz a newly promoted Domain Controller in the forest mean to say,itz an additional domain controller. While I was promoting, before it completed the promotion, accidently, they system got restarted. I have then renamed the machine + deleted the NTDS folder + deleted from sites&services and then promoted it again. It was succesfull but not all the records are created in DNS.

The evend id 16650 description is "The account-identifier allocator failed to initialize properly.  The record data contains the NT error code that caused the failure.  Windows 2000 will retry the initialization until it succeeds; until that time, account creation will be denied on this Domain Controller.  Please look for other SAM event logs that may indicate the exact reason for the failure."

This machine is holding all the FSMO roles + RID pool too.
Where can I find SAM log for the exact reason of failure. I am attaching dcdiag/v test.
How can I resolve this issue without demoting this again.??

Awaiting your thoughts on this issue.

Regards,
Mohammed Athif Khaleel
Asst.Network Engineer
AlFaisaliah Group Information Technology
Tel.: +966-1-461-0077 x.209
Moble.: +966-59774015
Email: [EMAIL PROTECTED]
"Save Internet, Keep all the systems patched"

-----------------------------------------------------

This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom/which they are addressed. If you have received this email in error please notify the system manager at the following email address: [EMAIL PROTECTED] . Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Al Faisaliah Group. Internet communications cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, arrive late or contain viruses. The sender therefore does not accept liability for any errors or omissions in the context of this message, which arise as a result of Internet transmission. Finally, the recipient should check this email and any attachments for the presence of viruses. Al Faisaliah Group accepts no liability for any damage caused by any virus transmitted by this email.

-----------------------------------------------------