windows – 目录服务无法分配相对标识符

在工作中,我们目前有一个域控制器POLLY.该DC是RID主站.然而,曾经有两个其他DC,PAULA和PETTY.这些都是脱机的(很久以前),但它们出现在POLLYs配置中.奇怪的是,POLLY拥有与PETTY相同的IP.

当我尝试使用Active Directory用户和计算机添加新用户时,我不断收到以下错误消息：

Windows cannot create the object because the Directory Service was unable to allocate a relative identifier.

这很奇怪,因为POLLY(我们唯一的DC)是RID主机.

这是dcdiag的输出：

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Standardname-des-ersten-Standorts\POLLY
Starting test: Connectivity
……………………. POLLY passed test Connectivity

Doing primary tests

Testing server: Standardname-des-ersten-Standorts\POLLY
Starting test: Replications
REPLICATION-RECEIVED LATENCY WARNING
POLLY: Current time is 2012-01-11 09:18:28.
DC=ForestDnsZones,DC=europa-institut,DC=com
Last replication recieved from PETTY at 2004-08-12 17:48:21.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
DC=DomainDnsZones,DC=com
Last replication recieved from PETTY at 2004-08-13 10:50:52.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
CN=Schema,CN=Configuration,DC=com
Last replication recieved from PETTY at 2004-08-12 17:48:20.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
Last replication recieved from PAULA at 2004-08-25 01:05:28.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
CN=Configuration,DC=com
Last replication recieved from PETTY at 2004-08-13 10:54:37.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
Last replication recieved from PAULA at 2004-08-25 01:05:19.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
DC=europa-institut,DC=com
Last replication recieved from PETTY at 2004-08-13 11:04:57.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
Last replication recieved from PAULA at 2004-08-25 01:09:36.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
……………………. POLLY passed test Replications
Starting test: NCSecDesc
……………………. POLLY passed test NCSecDesc
Starting test: Netlogons
……………………. POLLY passed test Netlogons
Starting test: Advertising
……………………. POLLY passed test Advertising
Starting test: KNowsOfRoleHolders
……………………. POLLY passed test KNowsOfRoleHolders
Starting test: RidManager
……………………. POLLY passed test RidManager
Starting test: MachineAccount
……………………. POLLY passed test MachineAccount
Starting test: Services
……………………. POLLY passed test Services
Starting test: ObjectsReplicated
……………………. POLLY passed test ObjectsReplicated
Starting test: fRSSysvol
……………………. POLLY passed test fRSSysvol
Starting test: frsevent
There are warning or error events within the last 24 hours after the

SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
……………………. POLLY Failed test frsevent
Starting test: kccevent
……………………. POLLY passed test kccevent
Starting test: systemlog
An Error Event occured. EventID: 0x40000004
Time Generated: 01/11/2012 08:47:35
(Event String Could not be retrieved)
An Error Event occured. EventID: 0x40000004
Time Generated: 01/11/2012 09:05:49
(Event String Could not be retrieved)
……………………. POLLY Failed test systemlog
Starting test: VerifyReferences
……………………. POLLY passed test VerifyReferences

Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
……………………. ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
……………………. ForestDnsZones passed test CheckSDRefDom

Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
……………………. DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
……………………. DomainDnsZones passed test CheckSDRefDom

Running partition tests on : Schema
Starting test: CrossRefValidation
……………………. Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
……………………. Schema passed test CheckSDRefDom

Running partition tests on : Configuration
Starting test: CrossRefValidation
……………………. Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
……………………. Configuration passed test CheckSDRefDom

Running partition tests on : europa-institut
Starting test: CrossRefValidation
……………………. europa-institut passed test CrossRefValidation
Starting test: CheckSDRefDom
……………………. europa-institut passed test CheckSDRefDom

Running enterprise tests on : europa-institut.com
Starting test: Intersite
……………………. europa-institut.com passed test Intersite
Starting test: FsmoCheck
……………………. europa-institut.com passed test FsmoCheck

这是repadmin / showrepl的输出：

repadmin running command /showrepl against server localhost

Standardname-des-ersten-Standorts\POLLY

DC Options: IS_GC

Site Options: (none)

DC object GUID: 3c57a0b6-7047-4b42-a3d1-e5eed7513cbe

DC invocationID: 5194142b-3179-4cff-b17e-77af398b8007

为了能够添加新用户,我该怎么办？

首先,在DC上进行系统状态数据备份,以防万一.
接下来,执行元数据清理以删除已经过去的DC的所有痕迹.这是非常好的教程： http://www.petri.co.il/delete_failed_dcs_from_ad.htm 之后,再次运行dcdiag并告知我们问题是否仍然存在.