FIM: AD MA giving error: The directory service has exhausted the pool of relative identifiers.

Greetings,
Trying to export users to an OU in a remote forest AD from FIM 2010 R2 and I keep getting this error back from the destination AD:
"The directory service has exhausted the pool of relative identifiers."
After reading up on this I went back to the AD owners of the forest and they said that they had seen this before and had applied this hotfix from Microsoft to give their RID pool another bit (now making 31bits)...
http://support.microsoft.com/kb/2642658/en-us
Now I can create a user in their AD without a problem within ADSI, but FIM can't; I just get a "cd-error" with the afore-mentioned error description of "The directory service has exhausted the pool of relative identifiers".
I have checked the RID Manager, I have got the dcdiag (below) and everything looks OK except for the fact they have run this hotfix?
Test omitted by user request: Replications
Starting test: RidManager
* Available RID Pool for the Domain is 1073746324 to 2147483647
* XXXXXXX is the RID Master
* DsBind with RID Master was successful
* rIDAllocationPool is 1073745324 to 1073745823
* rIDPreviousAllocationPool is 1073745324 to 1073745823
* rIDNextRID: 1073745324
Has anyone come across this issue regarding the hotfix before and, if so, how did you get around this via FIM?
Cheers,

The work-around at the moment is to specify the IP address of the RID Pool manager server in the MA's preferred domain controller listing. Still working with the external forest as to why this is failing from the DC we initially connected to.

Similar Messages

DsRemoveDsDomainW error 0x2015 (The directory service can perform the requested operation only on a leaf object.)

Please help me to delete the Dead domain (was a domain the in parent forest, but to child domain), which had trust with parent domain as well. It showing presence in Active Directory Domains & Trust also.
Please show me a path to remove dead domain.
Thank you.
-Shamil

Hi,
To remove a domain from a forest, we need to demote every Domain Controller in this domain or perform
metadata cleanup using ntdsutil.exe tool.
We can run Dcpromo.exe to demote a DC, please remember to select
This server is the last domain controller in the domain check
box when you are demoting the last DC in
the domain.
Please make sure that DCs in this domain don’t holder any forest-wide FSMO roles.
If all domain controllers have been taken offline without demotion process, we can
perform metadata cleanup to remove this domain.
You can use ntdsutil.exe tool to connect to the
Domain Naming Master role holder, then remove the specific domain from the forest.
For more information please refer to these articles below:
How to remove orphaned domains from Active Directory
http://support.microsoft.com/kb/230306
Remove a domain
http://technet.microsoft.com/en-us/library/cc786082(v=WS.10).aspx
I hope this helps.
Amy Wang

"The Directory Service is Busy." Error Message When Trying to Rename PCs on AD 2012 R2 Domain

As the title says, I'm trying to rename some existing PCs on a Windows 2012 R2 Active Directory domain, but I keep getting the error: The
Directory Service is Busy.
The command I am using is:
netdom renamecomputer <OLD_NAME> /newname:<NEW_NAME> /ud:DOMAIN\user /pd:* /force /reboot:300
This command works on some machines but not others. Using Powershell elicits the same response. Any troubleshooting suggestions?
(this is cross post from Powershell here: https://social.technet.microsoft.com/Forums/windowsserver/en-US/b82cc024-4c33-47a7-bfb7-85a0a03ff357/the-directory-service-is-busy-error-message-when-trying-to-rename-pcs-on-ad-2012-r2-domain?forum=winserverpowershell)

Hi,
Considering that your issue isn't really PowerShell specific I'd probably try asking this question over in the Directory Services forum:
https://social.technet.microsoft.com/Forums/en-us/home?forum=winserverDS&filter=alltypes&sort=lastpostdesc
Perhaps someone here will have some answers for you as well, but I imagine the DS forum will be your quickest route to an answer.
Don't retire TechNet! -
(Don't give up yet - 13,225+ strong and growing)

Unable to print from MS Word: "The Directory Service is currently unavailable"

Hi! I hope you can help me. Please note that I have a Windows XP computer (Home Edition, Version 2002, Service Pack 3, 32-bit). When I initially installed a Brother printer (model# MFC-J475DW) in Dec 2013, I had no problems printing documents. My problems
started about 2 days ago. I got an error message after I opened a MS Word document (.doc) and clicked the Print button to print a document. The Printer "Name" field was empty. I clicked the dropdown box in that window and saw 3 options:
1 - Brother MFC-J475DW Printer
2 - Brother PC-FAX v.3.2
3 - PaperPort Image Printer
When I selected "Brother MFC-J475DW Printer," a Microsoft Word dialog box appeared, saying the following:
"The printer has not yet responded, but the Microsoft Office program may be able to proceed without printer information. Do you want to continue to wait for the printer?"
I can either click on a Yes button or a No button. Either way, I'm brought back to the Print page. When I click on the OK button to start printing, another error message appears:
"Windows cannot print due to a problem with the current printer setup. Try one or more of the following:
*Check the printer by printing a test page from Windows.
*Make sure the printer is turned on and online.
*Reinstall the printer driver."
I have a choice to click either OK or Web Help. I click the OK button to close the box, then return to the Print page. When I click on the "Find Printer..." button, the Find Printers window appears for a moment, then is replaced by this error message:
"The Directory Service is currently unavailable"
On Friday (Mar 21), when the error first occurred, I was able to print a letter in MS Word after un- and re-installing the Brother printer and its drivers. The problem reappeared the next day (Saturday). I don't want to do that every time to print a single
page, so would you please recommend a solution?
By the way, I am able to print a test page from the printer in Control Panel, and I can print from a Notepad document. Also, when I go to the Control Panel, select "Printers and Faxes," then right-click on the printer (Brother MFC-J475DW Printer),
then select the Ports page, there's a check mark next to USB001 (not LPT1 or COM1). When I click on the "Configure Port..." button, I get this error message:
"An error occurred during port configuration. This operation is not supported."
Earlier today, I got a reply from brother.com's tech support (thanks to the 1 year warranty). They said the problem is on my PC, not their printer. However, they provided links to completely uninstall the printer, then reinstall it. I did just that, but
the problem persists. I'll download OpenOffice.org's Office Suite to see if I can print documents with their software instead of MS Word. Until then, I await any suggestions.
I hope this info is helpful. Thanks in advance for your help.

I downloaded OpenOffice and am able to print documents (in particular, the same document I created in MS Word). I guess MS Word is to blame. I believe the issue is concluded, but I'd welcome any comments about the Active Directory, as I might have a problem
with OpenOffice in the future regarding that.

The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles.

We are in the process of removing a child domain from the forest and are down to two DCs. These are both Server 2008r2 sp1 servers, one physical and virtual (PDC). When I try to remove a DC (not the PDC emulator) I get the following error:
The operation failed because:
Active Directory Domain Services could not transfer the remaining data in directory partition DC=DomainDnsZones,DC=mydomain,DC=local to
Active Directory Domain Controller \\V-Svr03.mydomain.local.
The directory service is missing mandatory configuration information, and is unable to determine the ownership of floating single-master operation roles."
I have checked replication with repadmin /showrepl and all connections were successful. The dcdiag /test:kccEvent test on all servers passed.
Most DCdiag tests are successful. The only failure is on NCSecDesc when running dcdiag /test:NCSecDesc
   Testing server: Default-First-Site\DC1-DEV-OFC
      Starting test: NCSecDesc
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=ForestDnsZones,DC=hookemup,DC=local
         ......................... DC1-DEV-OFC failed test NCSecDesc
In researching this I find "If you do not plan to add an RODC to the forest, you can disregard this error."
We have not successfully run ADprep /rodcPrep nor do we plan on having any Read-Only DCs, so I think we can ignor this error. We did try running ADprep /rodcPrep but got an LDAP error which I can duplicate if this is important.
Schema and Naming FSMOs are on a DC higher in the forest. RID, PDC, and Infrastructure FSMOs for the child domain are on the Virtual server (PDC).
Any guidance on where to go from here would be greatly appreciated as I have no more hair on my head to pull.

Ok... I ran repadmin /showreps /v again and it shows no errors
C:\>repadmin /showreps /v
Default-First-Site\DC1-DEV-OFC
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: b294c59f-8b46-4133-89c5-0f30bfd49607
DSA invocationID: 1054285d-cffe-42b4-8074-e2d44adbb151
==== INBOUND NEIGHBORS ======================================
CN=Configuration,DC=mydomain,DC=local
    Default-First-Site\HESTIA via RPC
        DSA object GUID: b464fde9-29d7-4490-9582-fe9270050d50
        Address: b464fde9-29d7-4490-9582-fe9270050d50._msdcs.mydomain.local
        DSA invocationID: afea3845-9fa8-40a6-a477-84348a206348
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 16381490/OU, 16381490/PU
        Last attempt @ 2012-10-29 13:52:39 was successful.
    Default-First-Site\V-SVR03 via RPC
        DSA object GUID: 53018cc4-b8c9-48ce-9a54-1b987e7b08c8
        Address: 53018cc4-b8c9-48ce-9a54-1b987e7b08c8._msdcs.mydomain.local
        DSA invocationID: 45de2c10-ec8b-443d-a645-db4e0a352a23
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 114817/OU, 114817/PU
        Last attempt @ 2012-10-29 13:52:39 was successful.
    Default-First-Site\V-SVR01 via RPC
        DSA object GUID: e2f794eb-9658-4bad-b695-3d8c08f46371
        Address: e2f794eb-9658-4bad-b695-3d8c08f46371._msdcs.mydomain.local
        DSA invocationID: 07bb0fe9-bca9-46d1-92ce-308d36da478d
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 66047/OU, 66047/PU
        Last attempt @ 2012-10-29 13:52:39 was successful.
    Default-First-Site\ATHENA via RPC
        DSA object GUID: cb00a5b0-6dea-473c-bb42-19356dd9ed36
        Address: cb00a5b0-6dea-473c-bb42-19356dd9ed36._msdcs.mydomain.local
        DSA invocationID: 57313a9c-46a2-4b94-87cc-b3f91d54faed
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 8098197/OU, 8098197/PU
        Last attempt @ 2012-10-29 13:52:39 was successful.
CN=Schema,CN=Configuration,DC=mydomain,DC=local
    Default-First-Site\ATHENA via RPC
        DSA object GUID: cb00a5b0-6dea-473c-bb42-19356dd9ed36
        Address: cb00a5b0-6dea-473c-bb42-19356dd9ed36._msdcs.mydomain.local
        DSA invocationID: 57313a9c-46a2-4b94-87cc-b3f91d54faed
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 8097482/OU, 8097482/PU
        Last attempt @ 2012-10-29 13:52:39 was successful.
    Default-First-Site\V-SVR01 via RPC
        DSA object GUID: e2f794eb-9658-4bad-b695-3d8c08f46371
        Address: e2f794eb-9658-4bad-b695-3d8c08f46371._msdcs.mydomain.local
        DSA invocationID: 07bb0fe9-bca9-46d1-92ce-308d36da478d
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 65239/OU, 65239/PU
        Last attempt @ 2012-10-29 13:52:39 was successful.
    Default-First-Site\V-SVR03 via RPC
        DSA object GUID: 53018cc4-b8c9-48ce-9a54-1b987e7b08c8
        Address: 53018cc4-b8c9-48ce-9a54-1b987e7b08c8._msdcs.mydomain.local
        DSA invocationID: 45de2c10-ec8b-443d-a645-db4e0a352a23
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 114149/OU, 114149/PU
        Last attempt @ 2012-10-29 13:52:39 was successful.
    Default-First-Site\HESTIA via RPC
        DSA object GUID: b464fde9-29d7-4490-9582-fe9270050d50
        Address: b464fde9-29d7-4490-9582-fe9270050d50._msdcs.mydomain.local
        DSA invocationID: afea3845-9fa8-40a6-a477-84348a206348
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 16381373/OU, 16381373/PU
        Last attempt @ 2012-10-29 13:52:39 was successful.
DC=ForestDnsZones,DC=mydomain,DC=local
    Default-First-Site\V-SVR01 via RPC
        DSA object GUID: e2f794eb-9658-4bad-b695-3d8c08f46371
        Address: e2f794eb-9658-4bad-b695-3d8c08f46371._msdcs.mydomain.local
        DSA invocationID: 07bb0fe9-bca9-46d1-92ce-308d36da478d
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 66295/OU, 66295/PU
        Last attempt @ 2012-10-29 13:57:48 was successful.
    Default-First-Site\ATHENA via RPC
        DSA object GUID: cb00a5b0-6dea-473c-bb42-19356dd9ed36
        Address: cb00a5b0-6dea-473c-bb42-19356dd9ed36._msdcs.mydomain.local
        DSA invocationID: 57313a9c-46a2-4b94-87cc-b3f91d54faed
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 8098367/OU, 8098367/PU
        Last attempt @ 2012-10-29 13:58:13 was successful.
    Default-First-Site\V-SVR03 via RPC
        DSA object GUID: 53018cc4-b8c9-48ce-9a54-1b987e7b08c8
        Address: 53018cc4-b8c9-48ce-9a54-1b987e7b08c8._msdcs.mydomain.local
        DSA invocationID: 45de2c10-ec8b-443d-a645-db4e0a352a23
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 115032/OU, 115032/PU
        Last attempt @ 2012-10-29 13:58:25 was successful.
    Default-First-Site\HESTIA via RPC
        DSA object GUID: b464fde9-29d7-4490-9582-fe9270050d50
        Address: b464fde9-29d7-4490-9582-fe9270050d50._msdcs.mydomain.local
        DSA invocationID: afea3845-9fa8-40a6-a477-84348a206348
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 16381653/OU, 16381653/PU
        Last attempt @ 2012-10-29 13:58:34 was successful.
DC=mySUBdomain,DC=local
    Default-First-Site\V-SVR03 via RPC
        DSA object GUID: 53018cc4-b8c9-48ce-9a54-1b987e7b08c8
        Address: 53018cc4-b8c9-48ce-9a54-1b987e7b08c8._msdcs.mydomain.local
        DSA invocationID: 45de2c10-ec8b-443d-a645-db4e0a352a23
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 114871/OU, 114871/PU
        Last attempt @ 2012-10-29 13:54:02 was successful.
DC=DomainDnsZones,DC=mySUBdomain,DC=local
    Default-First-Site\V-SVR03 via RPC
        DSA object GUID: 53018cc4-b8c9-48ce-9a54-1b987e7b08c8
        Address: 53018cc4-b8c9-48ce-9a54-1b987e7b08c8._msdcs.mydomain.local
        DSA invocationID: 45de2c10-ec8b-443d-a645-db4e0a352a23
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
        USNs: 114017/OU, 114017/PU
        Last attempt @ 2012-10-29 13:52:39 was successful.
DC=mydomain,DC=local
    Default-First-Site\V-SVR03 via RPC
        DSA object GUID: 53018cc4-b8c9-48ce-9a54-1b987e7b08c8
        Address: 53018cc4-b8c9-48ce-9a54-1b987e7b08c8._msdcs.mydomain.local
        DSA invocationID: 45de2c10-ec8b-443d-a645-db4e0a352a23
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS
        USNs: 114017/OU, 114017/PU
        Last attempt @ 2012-10-29 13:52:39 was successful.
    Default-First-Site\HESTIA via RPC
        DSA object GUID: b464fde9-29d7-4490-9582-fe9270050d50
        Address: b464fde9-29d7-4490-9582-fe9270050d50._msdcs.mydomain.local
        DSA invocationID: afea3845-9fa8-40a6-a477-84348a206348
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS
        USNs: 16381614/OU, 16381614/PU
        Last attempt @ 2012-10-29 13:56:52 was successful.
    Default-First-Site\V-SVR01 via RPC
        DSA object GUID: e2f794eb-9658-4bad-b695-3d8c08f46371
        Address: e2f794eb-9658-4bad-b695-3d8c08f46371._msdcs.mydomain.local
        DSA invocationID: 07bb0fe9-bca9-46d1-92ce-308d36da478d
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS
        USNs: 66325/OU, 66325/PU
        Last attempt @ 2012-10-29 13:58:34 was successful.
    Default-First-Site\ATHENA via RPC
        DSA object GUID: cb00a5b0-6dea-473c-bb42-19356dd9ed36
        Address: cb00a5b0-6dea-473c-bb42-19356dd9ed36._msdcs.mydomain.local
        DSA invocationID: 57313a9c-46a2-4b94-87cc-b3f91d54faed
        SYNC_ON_STARTUP DO_SCHEDULED_SYNCS
        USNs: 8098385/OU, 8098385/PU
        Last attempt @ 2012-10-29 13:58:38 was successful.

Unable to create database entry in the directory service. - TNS-04

We run into this error when we tried to register an Oracle 10.2.0.4 database with OID server (10.1.4.3):
Unable to create database entry in the directory service. - TNS-04409: Directory service error
We use Oracle DBCA to register to the OID. Both Oracle database and OID server are all running under Sun Solaris environment.
In the meantime, I found these errors in the oid logs:
oidldapd01.log:
2009/07/13:21:15:47 * DispatcherListener:2 * ERROR : gslsflAcceptConnAndSend : OS 2 : Unable to accept New TCP
connection
Any ideas?
Thanks
Naiying

Hi,
Thanks for update.
No, didn't find DSCC agent logs get updated when I have the pop up.
C:\dsee7\var\dcc\agent\logs
In the glassfish server log, I didn't find new transaction when I hit the issue
C:\glassfish3\glassfish\domains\domain1\logs

The object in Directory Services has a class missing

Hello,
In Pending Events we have a few events for users (who are not yet managed by NSM for AD) with the following actions (and action states):
Evaluating Add Member (Evaluating user policy)
Create User (Getting policy for the user)
The last error message is: 92 : The object in Directory Services has a class or attribute mismatch and is not valid. Viewing the nsmengine-ad-(date).log file, I can see the following entries:
01 2014-04-02 08:55:20 3600 3 8003 1436 2908 cc::ds_ad::GetObjectListAsyncEx() - Called piDirSearch->GetNextRow(...), HRESULT = 80072030, Result = 15.
01 2014-04-02 08:55:20 3600 5 0008 1436 2908 PolicyTools::GetEffectivePolicies - Failed to get indirect group memberships for CN=<UserDetails>,DC=local. Result = 15.
A quick search for the error number indicates that the error (80072030) is that there is no such object on the server. All our DCs are Global Catalogs and I can confirm the users exist and are valid. Some of our groups do have a large number of members (up to 30,000).
Any idea what could be causing the issue and how to resolve it?
Thanks,
Jonathan

On 4/2/2014 5:06 AM, JonathanCox wrote:
>
> Hello,
>
> In �Pending Events� we have a few events for users (who are not yet
> managed by NSM for AD) with the following actions (and action states):
>
>
> - Evaluating Add Member (Evaluating user policy)
> - Create User (Getting policy for the user)
>
>
> The �last error� message is: �92 : The object in Directory Services has
> a class or attribute mismatch and is not valid.� Viewing the
> nsmengine-ad-(date).log file, I can see the following entries:
>
> 01 2014-04-02 08:55:20 3600 3 8003 1436 2908
> cc::ds_ad::GetObjectListAsyncEx() - Called piDirSearch->GetNextRow(...),
> HRESULT = 80072030, Result = 15.
> 01 2014-04-02 08:55:20 3600 5 0008 1436 2908
> PolicyTools::GetEffectivePolicies - Failed to get indirect group
> memberships for CN=<UserDetails>,DC=local. Result = 15.
>
> A quick search for the error number indicates that the error (80072030)
> is that �there is no such object on the server�. All our DC�s are Global
> Catalog�s and I can confirm the users exist and are valid. Some of our
> groups do have a large number of members (up to 30,000).
>
> Any idea what could be causing the issue and how to resolve it?
>
> Thanks,
>
> Jonathan
>
>
Jonathan,
Which version of NSM are you using? Specifically, what Engine build are
you on? The easiest way to check this is in the Engine Status panel of
the NSM Admin client.
-- NFMS Support Team

Error-The directory originally specified in the selected output module

I put together an animated text composition that I would like to add to the beginning of one of my premier projects. When trying to render I keep getting an error that the directory originally selected in the output module no longer exists. I tried windows media, animated gif, NTSC, custom, etc. and nothing works. What is wrong with this?

Hi, there.
I'm using After Effects CS5.5 on a college computer for class. I got this error message when I loaded a project from another computer, so decided to redo the whole thing over again on the computer I'm using now. I was almost through this new project and I wanted to see how it looked, but I got the same blasted error. I don't know anything about the output module or how to properly change it, so I'm afraid I'd make it worse by tampering. It's now overdue, so I beg somebody to reply ASAP.

"The WmiSE service has reported an invalid current state 0." error continuouls fatched on server 2008 R2.

hello support,
i am using window server 2008 R2 as a web server.i saw error "The WmiSE service has reported an invalid current state 0." in system logs of event viewer, and also continuosly fatched.i want to know why it gives such kind of error and how i can
solve it.

Hi,
Based on your description, I guess that you get Event ID 7016. For this Event,
If a service is not coded correctly to appropriately handle control calls from the Service Control Manager (SCM), the SCM may log this event -- with a invalid current state value of zero (0). For more details, please refer to following article and
check if can help you.
Event ID 7016 — Basic Service Operations
If anything I misunderstand or any update, please don't hesitate to let me know.
Best regards,
Justin Gu
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Event 7024 The DPMRA service terminated with the following service-specific error:

Hi
I am getting a DPMRA error on an Exchange 2013 Server.
Event 7024, Service Control Manager
The DPMRA service terminated with the following service-specific error:
An attempt was made to access a socket in a way forbidden by its access permissions.
I think I have fixed the issue by uninstalling the DPM Agent and reinstalling it. It now needs a restart (I will do this after hours)
Is there a better way of fixing an issue like this?

Hi
Something has probably changed on the protected server side that affects the DPM agent. In some cases the DCOM configuration could change. Look at this blogpost and verify your DPMRA DCOM object.
http://robertanddpm.blogspot.com/2010/08/dpm-ra-rights.html
If this doesn't do the trick try reinstall the agent.
Best Regards
Robert Hedblom
MVP DPM
Check out my DPM blog @ http://robertanddpm.blogspot.com

What is the password? registering database with the directory service

I'm currently installing Oracle Collaboration Suite and everything being going fine until the postinstallation tasks for Oracle email.
When I attempt to register the database with the directory service I'm not sure what I should be entering here.
The guide says:
cn=orcladmin should be entered in the User DN field but what is the password?
and should orcl be replaced with my sid I entered during installation?
I have tried a number of things but all I get is:
Invalid Directory Service Credentials
Thanks in advance for any help
Best Regards
Charlie

No worries - found note in documentation regarding default password
Thanks
Charlie

7016 - The Health Service cannot verify the future validity of the RunAs account

Hi,
We have several gateways set up on our other domains (DMZ, Test and Dev) using certificates to connect to the RMS with a few agents reporting to the gateway in it's domain. I am recieving this warning for all gateways and agents that are being monitored (in the other domains). All our servers are either Win 2003 32bit or Win 2003 64bit.
The Health Service cannot verify the future validity of the RunAs account PRODUCTION\username for management group PRODMGMT due to an error retrieving information from Active Directory (for Domain Accounts) or the local security authority (for Local Accounts). The error is The network path was not found.(0x80070035).
From the searching that I've done on the net, a couple of people have mentioned that if you set the password expiration flag on AD users and computers for the account the problem will go away.. This hasn't happened for me.
I have checked the logs on the gateway servers and they report the following messages:
Event Type: Error
Event Source: HealthService
Event Category: Health Service
Event ID: 7016
Date:  15/03/2010
Time:  6:05:25 AM
User:  N/A
Computer: DEMOMMS003
Description:
The Health Service cannot verify the future validity of the RunAs account PRODUCTION\username for management group PRODMGMT due to an error retrieving information from Active Directory (for Domain Accounts) or the local security authority (for Local Accounts). The error is The network path was not found.(0x80070035).
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: HealthService
Event Category: Health Service
Event ID: 7020
Date:  15/03/2010
Time:  6:05:25 AM
User:  N/A
Computer: DEMOMMS003
Description:
The Health Service has validated all RunAs accounts for management group PRODMGMT, except those we could not monitor.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
However a few hours later I don't get any error messages and it seems to be working happily.
Event Type: Information
Event Source: HealthService
Event Category: Health Service
Event ID: 7026
Date:  15/03/2010
Time:  9:02:28 AM
User:  N/A
Computer: DEMOMMS003
Description:
The Health Service successfully logged on the RunAs account PRODUCTION\username for management group PRODMGMT
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: HealthService
Event Category: Health Service
Event ID: 7023
Date:  15/03/2010
Time:  9:02:28 AM
User:  N/A
Computer: DEMOMMS003
Description:
The Health Service has downloaded secure configuration for management group PRODMGMT successfully.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: HealthService
Event Category: Health Service
Event ID: 7025
Date:  15/03/2010
Time:  9:02:28 AM
User:  N/A
Computer: DEMOMMS003
Description:
The Health Service has authorized all configured RunAs accounts to execute for management group PRODMGMT.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: HealthService
Event Category: Health Service
Event ID: 7024
Date:  15/03/2010
Time:  9:02:28 AM
User:  N/A
Computer: DEMOMMS003
Description:
The Health Service successfully logged on all accounts for management group PRODMGMT
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Despite the successful logs that appear the gateway still shows up with the same warning.
If i stop and start the service on the gateway it then shows up as healthy in SCOM, but then the next day it the warning comes back.
Is the problem caused by different domain acounts and when it tries to find it in the domain it can't find it?
Cheers,
Phil

I also have the same problem with my scom 2012 system.
I am getting 7021 and 7016 events.
as mentioned by Jonathan, i am able to open notepad with the user account for which we are getting error.
another thing noted, when we run setspn -l domain\acc , we are getting error
Ldap Error(0x51 -- Server Down): ldap_open
or
FindDomainForAccount: Call to DsGetDcNameWithAccountW failed with return value 0x00000525
Could not find account DOMAIN/account
Another point to add, my server is ABC.XXX.company.com and acc i am using us YYY\acc_name. I mean to say my account is of diff domain.
This config is working fine no issues at all in another server which was setup earlier with 2007 r2.
Manish
I recently had the same issue in our Forest. Did you try YYY.company.com\acc_name? If you use the netbios name, setspn (and scom does on account validation as well, if you just pick the domainname from the list) will try to resolve the dc via netbios. Two
alternatives: add the other domain to the dns searchlist for your network adapter (I won't do this one, this does not resolve the cause of the problem) or configure your action accounts with fqdn [email protected] The funny thing is, in scom event
you will see scom validated account "\[email protected]" (still add's the backslash)
Correction: this did not solve the issue as mentioned before, the error reappeared again... :(

Connecting to the LOB system has failed. A network-related or instance-specific error occurred while establishing a connection to SQL Serve

Hi!
I'm using consume adapter service> sqlbinding > to connect to sql database in order to generate sql schemas.
I'm getting below error:
Connecting to the LOB system has failed.
A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider:
SQL Network Interfaces, error: 26 - Error Locating Server/Instance Specified).
Christiane

Hi,
As suggested earlier this seems to be a DTC related issue. It can only occur if the DTC settings are not proper or if firewalls don't allow the default ports to communicate.
Check DTC settings on both SQL and BizTalk Box and also check if MSDTC service is up and running.
Go to Start
à Run
à (type in) Dcomcnfg. You should be inside Component Services MMC.
Expand Component Services
à Computers
à My Computer (right click)
à Properties
à MSDTC tab
à Security Configuration button.
Select the checkboxes as following :
Check the below article from Microsoft Support Team, they have listed all the errors which may come during setting up a new system. They also have your MSDTC error listed.
Resolving the issues you may face during BizTalk Runtime Configuration
Thanks,
Prashant
Please mark this post accordingly if it answers your query or is helpful.

Error code: MobileMe Services has encountered a problem and needs to close - I get this message everytime i open Outlook and it slows down opening? This problem started when itunes updated

Error code: MobileMe Services has encountered a problem and needs to close
I get this mesage everytime i open Outlook and it slows down opening. This problem started when itunes updated. What do I do to solve this?

Hi turingtest2 (you pass, BTW): Thanks for the speedy reply. MobileMe doesn't appear in the list of programs which can be uninstalled. I tried the link you suggest: http://support.microsoft.com/mats/Program_Install_and_Uninstall but when I tried to "Run Now", I get the error message: " Troubleshooting cannot continue because an error has occurred... etc.... [code 80072F8F]" So googled this error & found a tool called (80072f8f) Repair Tool - I'm leery to download yet more stuff from non-microsoft sites -- any recommendations?

Problems doing the "Web Service" example from the 2-Day-Developer Guide

Hello,
I want to do the "web service" example from the 2-Day-Developer Guide.
I give the application my proxy server address in the format address:port and go through the assistant creating the web service. After selecting the IBM UDDI-service and searching for %xMethods% as business name I get the following error:
ORA-31011: XML-Parsing not successful ORA-19202: Error parsing XML LPX-00104: Warning: Element "html" is not declared in DTD Error at line 2
What have I done wrong?
With kind regards
Florian Reiser

Please.. Could you change your forum handle to something more human, we are a friendly group here and lik to know who we are talking to.. Secondly, WHy are you using such an OLD version oft he product. You would be better off installing 3.2.1 (latest released build) and asking your questions after you do that..
(I am sorry, it's like asking for help in a Windows support forum about issues you are having with Windows 3.1)
Thank you,
Tony Miller
Webster, TX

FIM: AD MA giving error: The directory service has exhausted the pool of relative identifiers.

Similar Messages

Maybe you are looking for