求助win2k srv 问题

田博路

我管理的局域网中有两台域控制器，最近更换了一台域控制器，新服务器被提升成DC后，不能添加用户了，另一台DC也无法添加用户，错误提示如下

“windows不能用全局编录服务器验证建议的用户名的唯一性，因为：该服务器不可操作。windows将创建用户账户，但是只有用户名被验证为唯一后，用户才能登录，获得进一步的帮助，请与系统管理员联系”


哪位高手能帮我，谢谢了

grassstar

全局编录服务器没了，设一台DC为全局编录服务器；
place:
dssite.msc-->sites-->Servers-->..>right click \"NTDS Settings\"-->choose \"Global catalog\";

田博路

版主，谢谢你的支持。还有一个问题，按照你的提示做了设置之后，不再出现上次提到的错误提示，但是在创建用户的最后一步，即点击“完成”按钮时，系统给出错误提示如下
“windows无法创建，因为：目录服务无法分配相对标识号”


这是什么原因引起的，请指教。

谢谢

linyuexin

gc一共有五种角色，你还有其他的没有转移呢！看看微软的文档吧

田博路

RID主机脱机了，并且该主机已经不存在了，该怎么解决啊

高手们，帮帮我吧，急的要命

grassstar

To run ntdsutil to grab roles;
---------------------------------------------------------------------------
C:\\>ntdsutil
ntdsutil: help

?                             - Print this help information
Authoritative restore         - Authoritatively restore the DIT database
Domain management             - Prepare for new domain creation
Files                         - Manage NTDS database files
Help                          - Print this help information
IPDeny List                   - Manage LDAP IP Deny List
LDAP policies                 - Manage LDAP protocol policies
Metadata cleanup              - Clean up objects of decommissioned server
Popups %s                     - (en/dis)able popups with \"on\" or \"off\"
Quit                          - Quit the utility
Roles                         - Manage NTDS role owner tokens
Security account management   - Manage Security Account Database - Duplic
D Cleanup
Semantic database analysis    - Semantic Checker

ntdsutil: roles
fsmo maintenance: help

?                             - Print this help information
Connections                   - Connect to a specific domain controller
Help                          - Print this help information
Quit                          - Return to the prior menu
Seize domain naming master    - Overwrite domain role on connected server
Seize infrastructure master   - Overwrite infrastructure role on connecte
er
Seize PDC                     - Overwrite PDC role on connected server
Seize RID master              - Overwrite RID role on connected server
Seize schema master           - Overwrite schema role on connected server
Select operation target       - Select sites, servers, domains, roles and
g Contexts
Transfer domain naming master - Make connected server the domain naming m
Transfer infrastructure master - Make connected server the infrastructure
r
Transfer PDC                  - Make connected server the PDC
Transfer RID master           - Make connected server the RID master
Transfer schema master        - Make connected server the schema master

fsmo maintenance: connections
server connections: help

?                             - Print this help information
Clear creds                   - Clear prior connection credentials
Connect to domain %s          - Connect to DNS domain name
Connect to server %s          - Connect to server, DNS name or IP address
Help                          - Print this help information
Info                          - Show connection information
Quit                          - Return to the prior menu
Set creds %s %s %s            - Set connection creds as domain, user, pwd
                                 Use \"NULL\" for null password

server connections: connect to server SERVERA.AAA.COM
Binding to SERVERA.AAA.COM ...
Connected to SERVERA.AAA.COM using credentials of locally logged
er
server connections: quit
fsmo maintenance: help

?                             - Print this help information
Connections                   - Connect to a specific domain controller
Help                          - Print this help information
Quit                          - Return to the prior menu
Seize domain naming master    - Overwrite domain role on connected server
Seize infrastructure master   - Overwrite infrastructure role on connecte
er
Seize PDC                     - Overwrite PDC role on connected server
Seize RID master              - Overwrite RID role on connected server
Seize schema master           - Overwrite schema role on connected server
Select operation target       - Select sites, servers, domains, roles and Contexts
Transfer domain naming master - Make connected server the domain naming m
Transfer infrastructure master - Make connected server the infrastructurer
Transfer PDC                  - Make connected server the PDC
Transfer RID master           - Make connected server the RID master
Transfer schema master        - Make connected server the schema master

fsmo maintenance: seize RID master
jump out  a windows ,appear \"Are you sure you want server \'SERVERA.AAA.COM\' to seize the RID Master role with the value below?
CN=NTDS Settings,CN=SERVERA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration, DC=AAA,DC=com\",click <Yes>;

Attempting safe transfer of RID FSMO before seizure.
ldap_modify_sW error 0x34(52 (Unavailable).
Ldap extended error message is 000020AF: SvcErr: DSID-032104F7, problem 5002
AVAILABLE), data 1722

Win32 error returned is 0x20af(The requested FSMO operation failed. The curr
FSMO holder could not be contacted.)
)
Depending on the error code this may indicate a connection,
ldap, or role transfer error.
Transfer of RID FSMO failed, proceeding with seizure ...

Jump out a windows ,appear \"The selected server is not a direct replication partner of the previous RIDd master,It is recommended that only direct replication partners be promoted to be the RID master ,Do you want to proceed ahead? \",click <Yes>;

Transfer of RID FSMO failed, proceeding with seizure ...
Synchronizing server SERVERA.AAA.COM with its neighbours
This operation may take a few minutes ..........Done.

Server \"SERVERA.AAA.COM\" knows about 5 roles
Schema - CN=NTDS Settings,CN=CSTMAINBAK,CN=Servers,CN=Default-First-Sit
=Sites,CN=Configuration, DC=AAA,DC=com
Domain - CN=NTDS Settings,CN=CSTMAINBAK,CN=Servers,CN=Default-First-Sit
=Sites,CN=Configuration, DC=AAA,DC=com
PDC - CN=NTDS Settings,CN=SERVERA,CN=Servers,CN=Default-First-Site-Name,
CN=Configuration, DC=AAA,DC=com
RID - CN=NTDS Settings,CN=SERVERA,CN=Servers,CN=Default-First-Site-Name,
CN=Configuration, DC=AAA,DC=com
Infrastructure - CN=NTDS Settings,CN=SERVERA,CN=Servers,CN=Default-First
e,CN=Sites,CN=Configuration, DC=AAA,DC=com
fsmo maintenance:seize schema master
jump out a windows,appear :\"Are you sure you want server \'SERVERA.AAA.COM\' to seize the schema role with the value below?
CN=NTDS Settings,CN=SERVERA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration, DC=AAA,DC=com\" ,click <Yes>;
....

fsmo maintenance: seize domain naming master
jump out a windows,appear :\"Are you sure you want server \'SERVERA.AAA.COM\' to seize the domain naming role with the value below?
CN=NTDS Settings,CN=SERVERA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration, DC=AAA,DC=com\" ,click <Yes>;
Attempting safe transfer of domain naming FSMO before seizure.
ldap_modify_sW error 0x34(52 (Unavailable).
Ldap extended error message is 000020AF: SvcErr: DSID-03210194, problem 5002 (U
AVAILABLE), data 1722

Win32 error returned is 0x20af(The requested FSMO operation failed. The current
FSMO holder could not be contacted.)
)
Depending on the error code this may indicate a connection,
ldap, or role transfer error.
Transfer of domain naming FSMO failed, proceeding with seizure ...
Server \"SERVERA.AAA.COM\" knows about 5 roles
Schema - CN=NTDS Settings,CN=SERVERA,CN=Servers,CN=Default-First-Site-Name,CN=Si
es,CN=Configuration, DC=AAA,DC=com
Domain - CN=NTDS Settings,CN=SERVERA,CN=Servers,CN=Default-First-Site-Name,CN=Si
es,CN=Configuration, DC=AAA,DC=com
PDC - CN=NTDS Settings,CN=SERVERA,CN=Servers,CN=Default-First-Site-Name,CN=Sites
CN=Configuration, DC=AAA,DC=com
RID - CN=NTDS Settings,CN=SERVERA,CN=Servers,CN=Default-First-Site-Name,CN=Sites
CN=Configuration, DC=AAA,DC=com
Infrastructure - CN=NTDS Settings,CN=SERVERA,CN=Servers,CN=Default-First-Site-Na
e,CN=Sites,CN=Configuration, DC=AAA,DC=com
fsmo maintenance:

田博路

斑竹，谢谢你啊，按照你的指导，问题已经解决了，以后还会后麻烦你的地方，多谢