If RID Fails in a DC

Hello!

If RID is failed in a DC then what will be happend? which type problems will
uccred

Howdie!

"sekhar" wrote:
> If RID is failed in a DC then what will be happend? which type problems
> will
> uccred

You mean the DC with the RID FSMO role failed? You won't be able to create
new objects in Active Directory since DCs need to aquire RIDs from the RID
master to do so. Once their (local) pool of RIDs is exhausted, they need to
contact the RID master for a new pool.

If the RID master has failed and you can't bring it back online within a
reasonable time, seize the role:http://support.microsoft.com/kb/255504

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

Hi
Unless the rate of RID consumption is quite high, you won't notice anything.
Before the RID pool is exhausted you'll start to see in the event logs
warnings about the inability to proceed with RID renewal, when the RID pool
is exhausted you won't be able to create user accounts, computer accounts,
or security groups if the local RID pool is used up and cannot obtain a new
RID pool from the RID operations master.
Unless you're creating hundreds of users, computers, security groups... a
day, there are a good chance that the existing Domain controllers have
enough unused RIDs to be used (before the look).
If you are monitoring the DCs you'll notice the errors that will be shown in
event viewer before that happen. Actually is possible that you start other
weird things before o notice a RID master down. Let me explain... Generally
all FSMO roles are left in the first created DC for that domain, and for
that reason, is possible that you notice that you're missing those
additional FSMO roles (especially the PDCe) DOWN or unavailable before you
notice the RID master.
Exhausted pools may differ from version to version.

--

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

"sekhar" <sekhar@discussions.microsoft.com> wrote in message
news:63B09B1B-D00C-4600-B49F-AF20E99B3648@microsoft.com...
> Hello!
>
> If RID is failed in a DC then what will be happend? which type problems
> will
> uccred

Hello sekhar,

Do you talk about the RID master or an empty RID pool on a DC? Can you be
more specific and post the error you get? When the RID pool on a DC is exhausted
in can not create new objects, if the RID master is down it can not give
out new RID pools to the DC's.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

are you talking about the RID FSMO or the RID of a certain DC

In the first case the DCs cannot request new RID pools when the others are
empty
In the second case a DC cannot created security principals such as users,
groups, computers

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------

"sekhar" <sekhar@discussions.microsoft.com> wrote in message
news:63B09B1B-D00C-4600-B49F-AF20E99B3648@microsoft.com...
> Hello!
>
> If RID is failed in a DC then what will be happend? which type problems
> will
> uccred