Petri.co.il forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Server Operating Systems > Windows Server 2000 / 2003 / 2003 R2
Petri.co.il is happy to award RicklesP the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read
Notices

The directory service was unable to allocate a relative identifier

The directory service was unable to allocate a relative identifier

this thread has 4 replies and has been viewed 12066 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 6th April 2011, 02:41
vbjr's Avatar
vbjr vbjr is offline
Casual
It's not a coincidence
 
 Join Date: Jul 2008
  6 month star 12 month star
 Posts: 62
 Reputation: vbjr is on a distinguished road (10)
Unhappy The directory service was unable to allocate a relative identifier

Hello guys and girls,

I tried to join a workstation to a domain and it gave me the "The directory service was unable to allocate a relative identifier"

Now I have tried to create a new user in the domain and it gives me the same error message.

The setup:
1x Windows 2003 Domain Controller (DC + DHCP + DNS + Print Server + File Server)
1x Windows 2003 Exchange Server

Previous to this setup it used to be the same but it was a Windows 2000 environment which was migrated to the new Windows 2003 setup.
The migration was done following the MS articles of moving FSO's and so forth.

When the migration was done the old servers were left on for 3 months and then switched off after that, the old servers are no longer available on the site.

The setup has been on purely 2k3 for around a year now and have not experienced any big problems.

Some useful info:
DCDIAG output:
---------------------

Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.
Doing initial required tests

Testing server: Default-First-Site-Name\BF-DC
Starting test: Connectivity
......................... BF-DC passed test Connectivity
Doing primary tests

Testing server: Default-First-Site-Name\BF-DC
Starting test: Replications
[Replications Check,BF-DC] A recent replication attempt failed:
From BFMAIN to BF-DC
Naming Context: CN=Schema,CN=Configuration,DC=company,DC=co,DC=uk
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS lookup failure.
The failure occurred at 2011-04-05 23:49:40.
The last success occurred at 2008-09-15 00:29:12.
22242 failures have occurred since the last success.
The guid-based DNS name f723ee2b-03b5-4990-97de-5c0ff9f343d2._msdcs.company.co.uk
is not registered on one or more DNS servers.
[BFMAIN] DsBindWithSpnEx() failed with error 1722,
The RPC server is unavailable..
[Replications Check,BF-DC] A recent replication attempt failed:
From BFMAIN to BF-DC
Naming Context: CN=Configuration,DC=company,DC=co,DC=uk
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS lookup failure.
The failure occurred at 2011-04-05 23:48:37.
The last success occurred at 2008-09-15 00:41:28.
23759 failures have occurred since the last success.
The guid-based DNS name f723ee2b-03b5-4990-97de-5c0ff9f343d2._msdcs.company.co.uk
is not registered on one or more DNS servers.
[Replications Check,BF-DC] A recent replication attempt failed:
From BFMAIN to BF-DC
Naming Context: DC=company,DC=co,DC=uk
The replication generated an error (8524):
The DSA operation is unable to proceed because of a DNS lookup failure.
The failure occurred at 2011-04-05 23:47:35.
The last success occurred at 2008-09-15 00:31:01.
22548 failures have occurred since the last success.
The guid-based DNS name f723ee2b-03b5-4990-97de-5c0ff9f343d2._msdcs.company.co.uk
is not registered on one or more DNS servers.
REPLICATION-RECEIVED LATENCY WARNING
BF-DC: Current time is 2011-04-06 00:34:25.
CN=Schema,CN=Configuration,DC=company,DC=co,DC=uk
Last replication recieved from BFMAIN at 2008-09-15 00:29:12.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
CN=Configuration,DC=company,DC=co,DC=uk
Last replication recieved from BFMAIN at 2008-09-15 00:41:28.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
DC=company,DC=co,DC=uk
Last replication recieved from BFMAIN at 2008-09-15 00:31:01.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
......................... BF-DC passed test Replications
Starting test: NCSecDesc
......................... BF-DC passed test NCSecDesc
Starting test: NetLogons
......................... BF-DC passed test NetLogons
Starting test: Advertising
......................... BF-DC passed test Advertising
Starting test: KnowsOfRoleHolders
......................... BF-DC passed test KnowsOfRoleHolders
Starting test: RidManager
The DS has corrupt data: rIDPreviousAllocationPool value is not valid
No rids allocated -- please check eventlog.
......................... BF-DC failed test RidManager
Starting test: MachineAccount
......................... BF-DC passed test MachineAccount
Starting test: Services
......................... BF-DC passed test Services
Starting test: ObjectsReplicated
......................... BF-DC passed test ObjectsReplicated
Starting test: frssysvol
......................... BF-DC passed test frssysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... BF-DC failed test frsevent
Starting test: kccevent
......................... BF-DC passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0xC00003EA
Time Generated: 04/05/2011 23:45:34
(Event String could not be retrieved)
An Error Event occured. EventID: 0x0000410B
Time Generated: 04/05/2011 23:47:23
Event String: The request for a new account-identifier pool
An Error Event occured. EventID: 0xC0000073
Time Generated: 04/05/2011 23:47:51
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0001B5B
Time Generated: 04/05/2011 23:48:20
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000423
Time Generated: 04/05/2011 23:48:37
Event String: The DHCP service failed to see a directory server
An Error Event occured. EventID: 0xC0000036
Time Generated: 04/05/2011 23:48:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0xC0000036
Time Generated: 04/05/2011 23:48:48
(Event String could not be retrieved)
An Error Event occured. EventID: 0x00000423
Time Generated: 04/05/2011 23:49:01
Event String: The DHCP service failed to see a directory server
......................... BF-DC failed test systemlog
Starting test: VerifyReferences
......................... BF-DC passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom

Running partition tests on : company
Starting test: CrossRefValidation
......................... company passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... company passed test CheckSDRefDom

Running enterprise tests on : company.co.uk
Starting test: Intersite
......................... company.co.uk passed test Intersite
Starting test: FsmoCheck
......................... company.co.uk passed test FsmoCheck




I hope you are able to help, looking forward to ideas on how to resolve this.
Most of the information I have found (specially on the MS site) mainly advises to seize the RID role and so forth, but kinda afraid of doing this.

Im able to provide remote access to the server if needed be (if there are people here that are kind enough to help remotely )
__________________
Blog: smoothblog.co.uk
  #2  
Old 6th April 2011, 12:36
Ossian Ossian is offline
Administrator
 
 Join Date: Nov 2003
  6 month star 12 month star
 Location: Bonnie Scotland
 Posts: 16,360
  Send a message via Skype™ to Ossian
 Reputation: Ossian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud of (1470)
Default Re: The directory service was unable to allocate a relative identifier

Check which server holds the RIDMaster FSMO role and confirm all DCs can access it
__________________
Tom Jones
MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
PhD, MSc, FIAP, MIITT
IT Trainer / Consultant
Ossian Ltd
Scotland

** Remember to give credit where credit is due and leave reputation points where appropriate **
  #3  
Old 6th April 2011, 18:50
vbjr's Avatar
vbjr vbjr is offline
Casual
It's not a coincidence
 
 Join Date: Jul 2008
  6 month star 12 month star
 Posts: 62
 Reputation: vbjr is on a distinguished road (10)
Default Re: The directory service was unable to allocate a relative identifier

Quote:
Originally Posted by Ossian View Post
Check which server holds the RIDMaster FSMO role and confirm all DCs can access it
Cheers, The records show that it is the RIDMASTER and FSO Master.
It is after all the only DC on the network.
Unless I am not checking it right, what method would you use?
I just did it through the AD msc
__________________
Blog: smoothblog.co.uk
  #4  
Old 7th April 2011, 16:25
tehcamel's Avatar
tehcamel tehcamel is offline
Moderator
 
 Join Date: Mar 2009
  6 month star 12 month star
 Location: Melbourne
 Posts: 5,482
  Send a message via Skype™ to tehcamel
 Reputation: tehcamel is a name known to alltehcamel is a name known to alltehcamel is a name known to alltehcamel is a name known to alltehcamel is a name known to alltehcamel is a name known to all (646)
Default Re: The directory service was unable to allocate a relative identifier

Definitely something wrong with your FSMO roles.

Has this server always just existed by itself ? Is it SBS?

do the correct _msdcs and other resource records exist in your dns console ?\

you've told us you only have one DC, but your dcdiag output clearly shows replication attempts. I would try a metadatacleanup, and seizing the FSMO roles (even if it thinks it already has them)
__________________

Melbourne IT Support


Please do show your appreciation to those who assist you by leaving Rep Point

Last edited by tehcamel; 7th April 2011 at 16:27..
  #5  
Old 8th April 2011, 01:42
L4ndy L4ndy is offline
Moderator
 
 Join Date: May 2006
  6 month star 12 month star
 Location: Liverpool, UK
 Posts: 2,634
 Reputation: L4ndy is a glorious beacon of lightL4ndy is a glorious beacon of lightL4ndy is a glorious beacon of lightL4ndy is a glorious beacon of lightL4ndy is a glorious beacon of lightL4ndy is a glorious beacon of light (541)
Default Re: The directory service was unable to allocate a relative identifier

Based on your dcdiag output, that might just be one of many problems you may have there.
I suspect is due to incorrectly restoring procedures of the ad database in the past or transfer/seizure of the fsmo roles.

Check the directory services and DNS events and post what's logged there that can be relevant.
__________________
Caesar's cipher - 3

ZKHQ BRX HYHQWXDOOB GHFLSKHU WKLV BRX ZLOO UHDOLVH LW ZDV D ZDVWH RI WLPH!

SFX JNRS FC U6 MNGR
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Unable to connect to Win 2003 service manager from win 2008 service manager charlsteve Windows Server 2008 / 2008 R2 0 7th April 2010 08:36
Can't assign a relative ID maxtor-be Active Directory 2 17th October 2009 17:11
Unable to start automatic update service nandlal_rawani Windows Server 2000 / 2003 / 2003 R2 2 13th July 2009 21:18
Homedirectory\Profilepath relative to site aviwollman Active Directory 2 26th December 2007 17:10
The server was unable to allocate from the system nonpaged pool tulik23 Windows Server 2000 / 2003 / 2003 R2 1 1st October 2007 01:09


All times are GMT +3. The time now is 00:57.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri