Global Catalog is not avalibale

[Lus]

hi

we have 2 domain controller (windows 2000 advance). every thing was good until now.

when i wana make new Object in BDC i recive this error :

"Windows cannot validate the uniqueness of this proposed user name with global catalog server because:

The server is not operational. Windows will create this user account, but the user can log on only after the

username is verified to be unique. "

I don’t have any experience in this. Please help me to solver this problem.

[chilifrei64]

2 things..

can you ping the global catalog server?

Do you have the NetBios TCP/IP Helper Service running?

[Lus]

yeh i can ping PDC or GCS ?

and netbios over TCP/IP is enable ?

[prey]

Hi Lus!

Do this...

1. Open "Active Directory Sites and Services"

2. Expand sites -> Expand [Your name site] -> Expand [Your server name] -> Expand NTDS Settings

3. Right-click "NTDS Settings" and select "properties" from the appearing menu.

4. Put a check-mark in "Global Catalog"

5. Close everything, and wait about 15 min before trying to create an object.

That’s it!

Hope this helps.

Kind Regards

Martin Andersen

Edited November 8, 2005 by prey

[Lus]

i think that in PDC it sould be check mark because in PDC, Exchange server is running so Global catalog must be enabled ?

so i must chek BDC for enabling in GC? is it right prey ?

Edited November 8, 2005 by Lus

[prey]

Where the GC role is placed, is less important, as you can in fact make all of your DC's Global Catalog. This is not advised, as you will have a lot of unnecessary sync. in the background. However - you should have at least two DC's that has the role of GC.

Kind Regards.

Martin Andersen

Edited November 8, 2005 by prey

[chilifrei64]

yes you can safely have the other machine a GC.. this will take care of your problem

[Lus]

thanks for replays

i wana reinstall AD on BDC and then istall AD and make it as GCS ?

on my BDC i have Exchange so i afraid if i unistall AD it make a problem for exchange server ?

is it right that if i unistall AD it will disable GC for using Exchange ?

Edited November 9, 2005 by Lus

[Minus Human]

-----------------------------------------------------------------------------------------------------

i wana reinstall AD on BDC and then istall AD and make it as GCS ?

on my BDC i have Exchange so i afraid if i unistall AD it make a problem for exchange server ?

is it right that if i unistall AD it will disable GC for using Exchange ?

----------------------------------------------------------------------------------------------------

Hey man,

You don't have to re-install AD on the BDC to make it a Global Catalog Server just follow preys' advice

Uninstalling AD on the BDC should'nt have an impact on your exchange seeing as you still have AD running on your PDC

By default the 1st directory server installed in your domain is a GC so by uninstalling it on the BDC will render no effect on your exchange seeing as GC is not enabled on the BDC.

More to the point though if you only have 2 Directory servers have you checked basic connectivety between the servers ??

Can the BDC even communicate with your PDC

How many users do you have ?

and you don't want to disable GC EVER

Minus Human

[clutch]

Hi guys,

I'd also have the same problem with lus. I found this thread upon searchin google. But as i have remember I have change the location of the RID master role from one of my DC and the error comes. Is there also a way i can have the RID operational cause right now im not running the operations master RID service.

thanks.. your help will be highly appreciated.

[prey]

Hi Clutch - sorry for the late reply, but I thought this treat was dead by now.

If you have lost you RID Master, then the creation of objects is no longer possible, but it should be easily fixed. Do this:

1. Open Active Directory User And Computers

2. Right click [YOUR DOMAIN NAME.YOUR EXTENSION] and select "Operations Masters"

3. in the appearing window click on the RID pane in the top of the window, and then click the button "Change". This forces the RID role on the you remaining DC.

If you have more then one DC left, you can chose where you want to move RID to of course...

4. Now wait about 20 minutes or so, and RID should be fully operational, and you should be able to create objects again.

Hope this help.

In general I think its a good idea to look up FISMO roles on MS technet to get an understanding of their importance, and get some guidelines on how to spread these roles across multiple domain controllers.

Kind Regards.

Martin Andersen