Windows cannot create an object because the directory service cannot allocate a relative identifier

WINDOWSSERVER2012 create user on Active Directory domain controller The following error occurred:

650) this.width=650; "Src=" Https://s4.51cto.com/oss/201711/03/9a28a700b0d5c97f6cf7235cff6849e8.jpg-wh_500x0-wm_3 -wmp_4-s_1065455346.jpg "title=" Create user error. jpg "alt=" 9a28a700b0d5c97f6cf7235cff6849e8.jpg-wh_ "/>

View System Log Discovery

650) this.width=650; "Src=" Https://s1.51cto.com/oss/201711/03/7d0f08ead8f5e340fe6f05dde2180557.jpg-wh_500x0-wm_3 -wmp_4-s_782690945.jpg "title=" to view the error log. jpg "alt=" 7d0f08ead8f5e340fe6f05dde2180557.jpg-wh_ "/>

The analysis is that a computer in a domain and a domain controller are replicated by the same virtual machine, with the same SID.

Solutions

Remove the backup DC from the main domain and drop the SID-like virtual machine.

This article is from the "Han Li" blog, please be sure to keep this source http://91xueit.blog.51cto.com/400469/1978648

Windows cannot create an object because the directory service cannot allocate a relative identifier