Logon error

  • Thread starter Thread starter Mathieu
  • Start date Start date
M

Mathieu

Hi,

I am ICT in a school.
I was making a classroom with computers and I was making computersaccounts
for them in my Windows 2000 server, on that computers.

When I had made 11 from 16 accounts, the other one's I could nog make a
computeraccount anymore.

I got an error (in dutch, so I translate);
"Active Directory has made empty the group with Relative ID's."

I can not make computeraccounts anymore.
Logging on to te domain is extremely slow.
There is very much network activity.
It is the only server in the domain. He has to do everything himself (AD,
printserver, fileserver, DNS, DHCP, ...).
Is my server about to die?
How can I save it?

PLEASE HELP ME

Mathieu
 
Hi Mathieu

The error that you are getting suggests that he DC has run out of RIDs, it
needs RIDs to make new objects in the Domain. From what you say this Domain
Controller is the only Domain Controller in the Domain, if so it should hold
the RID master role which is responsible for allocating Pools of RIDs to
Domain Controllers in the Domain.

Check this in Active Directory Users and Computers, right click on the
Domain and select "Operation Masters" under the RID tab check which server
is holding the role. If it is not this Domain Contoller and if you are
positive that this is the only Domain controller in the domain try
transferring the role if this does not work you will need to seize the role
using ntdsutil.
http://support.microsoft.com/default.aspx?scid=kb;en-us;255504

If the DC already holds this role, take a look in the Event logs, what
errors are you getting in the DS log. For the slow logon ensure that DNS is
configured correctly and that he records in DNS are correct.

HTH
Jody
 
Thanks Jody

I will check this tomorrow morning.

Thanks for your help. Thank you very much.
 
Back
Top