我不能建立用户了

pks425

昨天，我的AD（DC-01）挂掉了，还好我之前有做一个“额外域”DC-02。所以我换了新的硬盘重新做了DC-01。重新做好以后，因为不懂GC是什么东东，搞了半天都没有把exchange Server 的服务启起来。后来是别人的指点下才搞定，本以为一切都OK了，可今天又出现新的问题了，系统总是报错：“The account-identifier allocator failed to initialize properly.  The record data contains the NT error code that caused the failure.  Windows 2000 will retry the initialization until it succeeds; until that time, account creation will be denied on this Domain Controller.  Please look for other SAM event logs that may indicate the exact reason for the failure. ”  去建立用户发现也不行，请问这是什么原因，我在怎么做，求求大侠帮忙？？？？

pks425

出错现象：

砸锅卖铁

FSMO角色

pks425

能在具体一点吗？我不太懂，说说要怎么操作？谢谢！

砸锅卖铁

DC-01挂掉之前是否具有5个FSMO角色？目前FSMO角色是否存在？
下面这个链接和你的错误一样
http://support.microsoft.com/kb/839879/en-us

pks425

C:\>dcdiag /v
Domain Controller Diagnosis
Performing initial setup:
   * Verifying that the local machine gh-dc-01, is a DC.
   * Connecting to directory service on server gh-dc-01.
   * Collecting site info.
   * Identifying all servers.
   * Found 2 DC(s). Testing 1 of them.
   Done gathering initial info.
Doing initial required tests
   Testing server: Default-First-Site-Name\GH-DC-01
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         * Active Directory RPC Services Check
         ......................... GH-DC-01 passed test Connectivity
Doing primary tests
   Testing server: Default-First-Site-Name\GH-DC-01
      Starting test: Replications
         * Replications Check
         ......................... GH-DC-01 passed test Replications
      Test omitted by user request: Topology
      Test omitted by user request: CutoffServers
      Starting test: NCSecDesc
         * Security Permissions Check for
           CN=Schema,CN=Configuration,DC=ghinghong,DC=corpnet
         * Security Permissions Check for
           CN=Configuration,DC=ghinghong,DC=corpnet
         * Security Permissions Check for
           DC=ghinghong,DC=corpnet
         ......................... GH-DC-01 passed test NCSecDesc
      Starting test: NetLogons
         * Network Logons Privileges Check
         ......................... GH-DC-01 passed test NetLogons
      Starting test: Advertising
         The DC GH-DC-01 is advertising itself as a DC and having a DS.
         The DC GH-DC-01 is advertising as an LDAP server
         The DC GH-DC-01 is advertising as having a writeable directory
         The DC GH-DC-01 is advertising as a Key Distribution Center
         The DC GH-DC-01 is advertising as a time server
         The DS GH-DC-01 is advertising as a GC.
         ......................... GH-DC-01 passed test Advertising
      Starting test: KnowsOfRoleHolders
         Role Schema Owner = CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet
         Warning: CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet is the Schema Owne
r, but is deleted.
         Role Domain Owner = CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet
         Warning: CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet is the Domain Owne
r, but is deleted.
         Role PDC Owner = CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet
         Warning: CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet is the PDC Owner,
but is deleted.
         Role Rid Owner = CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet
         Warning: CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet is the Rid Owner,
but is deleted.
         Role Infrastructure Update Owner = CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet
         Warning: CN="NTDS Settings
DEL:bbfcc7f6-e224-4369-b783-2a3d447ed3b7",CN=GH-DC-01,CN=Servers,CN=Default-Firs
t-Site-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet is the Infrastruct
ure Update Owner, but is deleted.
         ......................... GH-DC-01 failed test KnowsOfRoleHolders
      Starting test: RidManager
         * Available RID Pool for the Domain is 4107 to 1073741823
         Warning: FSMO Role Owner is deleted.
         * gh-dc-01.ghinghong.corpnet is the RID Master
         * DsBind with RID Master was successful
         Warning: rid set reference is deleted.
         ldap_search_sW of CN=RID Set\
DEL:9fb372c6-b8fa-4a85-9a98-5c1d2da15bf2,CN=Deleted Objects,DC=ghinghong,DC=corp
net for rid info failed with 2: The system cannot find the file specified.
         ......................... GH-DC-01 failed test RidManager
      Starting test: MachineAccount
         * SPN found DAP/gh-dc-01.ghinghong.corpnet/ghinghong.corpnet
         * SPN found DAP/gh-dc-01.ghinghong.corpnet
         * SPN found DAP/GH-DC-01
         * SPN found :LDAP/gh-dc-01.ghinghong.corpnet/GHINGHONG
         * SPN found :LDAP/e552fa41-5c77-4eb1-9bd0-3ee2589d3d6f._msdcs.ghinghong
.corpnet
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/e552fa41-5c77-4eb1-9b
d0-3ee2589d3d6f/ghinghong.corpnet
         * SPN found :HOST/gh-dc-01.ghinghong.corpnet/ghinghong.corpnet
         * SPN found :HOST/gh-dc-01.ghinghong.corpnet
         * SPN found :HOST/GH-DC-01
         * SPN found :HOST/gh-dc-01.ghinghong.corpnet/GHINGHONG
         * SPN found :GC/gh-dc-01.ghinghong.corpnet/ghinghong.corpnet
         ......................... GH-DC-01 passed test MachineAccount
      Starting test: Services
         * Checking Service: Dnscache
         * Checking Service: NtFrs
         * Checking Service: IsmServ
         * Checking Service: kdc
         * Checking Service: SamSs
         * Checking Service: LanmanServer
         * Checking Service: LanmanWorkstation
         * Checking Service: RpcSs
         * Checking Service: RPCLOCATOR
         * Checking Service: w32time
         * Checking Service: TrkWks
         * Checking Service: TrkSvr
         * Checking Service: NETLOGON
         * Checking Service: Dnscache
            Could not open IISADMIN Service on [GH-DC-01]:failed with 1060: The
specified service does not exist as an installed service.
         * Checking Service: NtFrs
            Could not open SMTPSVC Service on [GH-DC-01]:failed with 1060: The s
pecified service does not exist as an installed service.
         ......................... GH-DC-01 failed test Services
      Test omitted by user request: OutboundSecureChannels
      Starting test: ObjectsReplicated
         GH-DC-01 is in domain DC=ghinghong,DC=corpnet
         Checking for CN=GH-DC-01,OU=Domain Controllers,DC=ghinghong,DC=corpnet
in domain DC=ghinghong,DC=corpnet on 1 servers
            Object is up-to-date on all servers.
         Checking for CN=NTDS Settings,CN=GH-DC-01,CN=Servers,CN=Default-First-S
ite-Name,CN=Sites,CN=Configuration,DC=ghinghong,DC=corpnet in domain CN=Configur
ation,DC=ghinghong,DC=corpnet on 1 servers
            Object is up-to-date on all servers.
         ......................... GH-DC-01 passed test ObjectsReplicated
      Starting test: frssysvol
         * The File Replication Service Event log test
         Error: No record of File Replication System, SYSVOL started.
         The Active Directory may be prevented from starting.
         ......................... GH-DC-01 passed test frssysvol
      Starting test: kccevent
         * The KCC Event log test
         Found no KCC errors in Directory Service Event log in the last 15 minut
es.
         ......................... GH-DC-01 passed test kccevent
      Starting test: systemlog
         * The System Event log test
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:12:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:14:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:16:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:18:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:20:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:22:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:24:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:26:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:28:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:30:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:32:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:34:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:36:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:38:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:40:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:42:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:44:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:46:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:48:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:50:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:52:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:54:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:56:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   13:58:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x00000457
            Time Generated: 01/04/2007   13:58:53
            Event String: Driver Canon i6500 required for printer
__print_Canon i6500 is unknown. Contact the
administrator to install the driver before you
log in again.
         An Error Event occured.  EventID: 0x00000452
            Time Generated: 01/04/2007   13:58:53
            Event String: The printer could not be installed.
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   14:00:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   14:02:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   14:04:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   14:06:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   14:08:12
            (Event String could not be retrieved)
         An Error Event occured.  EventID: 0x0000410A
            Time Generated: 01/04/2007   14:10:12
            (Event String could not be retrieved)
         ......................... GH-DC-01 failed test systemlog
   Running enterprise tests on : ghinghong.corpnet
      Starting test: Intersite
         Skipping site Default-First-Site-Name, this site is outside the scope
         provided by the command line arguments provided.
         ......................... ghinghong.corpnet passed test Intersite
      Starting test: FsmoCheck
         GC Name: \\gh-dc-01.ghinghong.corpnet
         Locator Flags: 0xe00001fc
         Warning: DcGetDcName(PDC_REQUIRED) call failed, error 1355
         A Primary Domain Controller could not be located.
         The server holding the PDC role is down.
         Time Server Name: \\gh-dc-01.ghinghong.corpnet
         Locator Flags: 0xe00001fc
         Preferred Time Server Name: \\gh-dc-01.ghinghong.corpnet
         Locator Flags: 0xe00001fc
         KDC Name: \\gh-dc-01.ghinghong.corpnet
         Locator Flags: 0xe00001fc
         ......................... ghinghong.corpnet failed test FsmoCheck
C:\>

pks425

DC-01之前是5 个，可现在我就不清楚了，如果不在，要怎么加上去。5555

peng3

随便找一下fsmo的五种角色转移的方法吧
不过你转移时要用那个size。。什么的，因为你的主控不存在了

jaffas1101

好长！！！