Re: Account Identifier Pool

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Chriss3 [MVP] (noSpamHere_at_chrisse.se)
Date: 09/13/04


Date: Mon, 13 Sep 2004 23:05:06 +0200

We have a DC that is an emergency redundant that is normally.
powered down, You should never have Domain Controllers in the Directory
Service that's not up and running like the reason redundancy, instead make a
good recovery plan.

-- 
Regards
Christoffer Andersson
Microsoft MVP - Directory Services
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
"IOC_MartinConrad" <IOCMartinConrad@discussions.microsoft.com> skrev i 
meddelandet news:CC22F380-2DF7-4066-A702-231BB7873556@microsoft.com...
> Chris,
> Actually, we have a DC that is an emergency redundant that is normally
> powered down, and anothe that no longer exists but has not been removed 
> from
> AD. Could this be the reason?
>
> Thanks.
> "Chriss3 [MVP]" wrote:
>
>> Sorry for delay of replay.
>> You may have broken computer accounts between DCs, is replication fine?
>>
>> -- 
>> Regards
>> Christoffer Andersson
>> Microsoft MVP - Directory Services
>>
>> No email replies please - reply in the newsgroup
>> ------------------------------------------------
>> http://www.chrisse.se - Active Directory Tips
>>
>> "IOC_MartinConrad" <IOCMartinConrad@discussions.microsoft.com> skrev i
>> meddelandet news:383FF942-2DCC-4B82-90B0-35C23FF6FC00@microsoft.com...
>> > Christoffer,
>> > I have seen this article. I do not get the error that is in the 
>> > article's
>> > title, and in addition to this, when I run the Ridmanager test in 
>> > DCDiag,
>> > the
>> > server passes the test. In this light, what could these log entries 
>> > mean?
>> >
>> > Thanks.
>> >
>> > "Chriss3 [MVP]" wrote:
>> >
>> >> Have a look in to this KB
>> >> http://support.microsoft.com/?kbid=839879
>> >>
>> >> -- 
>> >> Regards
>> >> Christoffer Andersson
>> >> Microsoft MVP - Directory Services
>> >>
>> >> No email replies please - reply in the newsgroup
>> >> ------------------------------------------------
>> >> http://www.chrisse.se - Active Directory Tips
>> >>
>> >> "IOC_MartinConrad" <IOC_MartinConrad@discussions.microsoft.com> skrev 
>> >> i
>> >> meddelandet news:9933F27E-064F-419B-A869-E4F08EDE3C4C@microsoft.com...
>> >> > Hello,
>> >> > I have a question: when I add an account to Active Directory on our
>> >> > domain
>> >> > controller, I get the following message in the System Log:
>> >> >
>> >> > Event Type: Information
>> >> > Event Source: SAM
>> >> > Event Category: None
>> >> > Event ID: 16647
>> >> > Date: 9/10/2004
>> >> > Time: 1:34:32 PM
>> >> > User: N/A
>> >> > Computer: IOC
>> >> > Description:
>> >> > The domain controller is starting a request for a new
>> >> > account-identifier
>> >> > pool.
>> >> >
>> >> > This message is immediately followed by the following:
>> >> >
>> >> > Event Type: Warning
>> >> > Event Source: Schannel
>> >> > Event Category: None
>> >> > Event ID: 36872
>> >> > Date: 9/10/2004
>> >> > Time: 1:34:32 PM
>> >> > User: N/A
>> >> > Computer: IOC
>> >> > Description:
>> >> > No suitable default server credential exists on this system. This 
>> >> > will
>> >> > prevent server applications that expect to make use of the system
>> >> > default
>> >> > credentials from accepting SSL connections. An example of such an
>> >> > application
>> >> > is the directory server. Applications that manage their own
>> >> > credentials,
>> >> > such
>> >> > as the internet information server, are not affected by this.
>> >> >
>> >> >
>> >> > The account is able to be added and all seems well. This message 
>> >> > will
>> >> > appear
>> >> > again after a reboot, the first time I use Active Directory to add 
>> >> > an
>> >> > account.
>> >> >
>> >> > What does this mean?
>> >> >
>> >> > Also, it should be noted that I have a certificate authority 
>> >> > installed
>> >> > on
>> >> > a
>> >> > member server, but I don't believe it is an Enterprise CA (is there 
>> >> > any
>> >> > way
>> >> > to tell?)
>> >> >
>> >> > Thanks.
>> >>
>> >>
>> >>
>>
>>
>> 


Relevant Pages

  • Re: Server/DC Migration from 2000 to 2003
    ... Then Demote the old Windows 2000 Server DC. ... Make sure you upgrade the schema first to support 2003 Domain Controllers, ... >> Christoffer Andersson ...
    (microsoft.public.windows.server.active_directory)
  • Re: What are the best general things to do after a dirty shutdown (Server SBS)
    ... You should check the dirctory services event log and the system event logs for errors and warning in addition to running the dcdiag /c /v command. ... This event can occur if the domain controllers ... Directory Server Diagnosis ... Verifying that the local machine ALPHA, ...
    (microsoft.public.windows.server.sbs)
  • Re: What are the best general things to do after a dirty shutdown (Server SBS)
    ... You should check the dirctory services event log and the system event logs for errors and warning in addition to running the dcdiag /c /v command. ... This event can occur if the domain controllers ... Directory Server Diagnosis ... Verifying that the local machine ALPHA, ...
    (microsoft.public.windows.server.sbs)
  • Re: What are the best general things to do after a dirty shutdown (Server SBS)
    ... test network connectivity to local domain controllers. ... Directory Server Diagnosis ... Verifying that the local machine ALPHA, ... The File Replication Service Event log test ...
    (microsoft.public.windows.server.sbs)
  • Re: Net logon error event id:3096
    ... Verifying that the local machine yblrtgswip1, ... Connecting to directory service on server yblrtgswip1. ... No record of File Replication System, ... interval between domain controllers. ...
    (microsoft.public.win2000.active_directory)