second domain controller cant add user

Question

Hi Everyone, We can't add users from our second domain controller. we are getting this error. Windows cannot set the password for <user> because

The specified directory object is not bound to a remote resource

Answer 1

Hi @rtuesca

Based on the result of dcdiag and replication status, it seems that RID pool on the second domain controller is corrupted.

Try to demote and repromote the second domain controller again then check if it can fix your issue.

---

Please don't forget to accept helpful answer

Answer 2

Hi @rtuesca

Check if the RID master is available when you try to create new user.

RID muster shoule be available when you create new object in active directory. To identy the domain controller with RID master role you can run the following command:

netdom query fsmo

Start by checking replication health between all domain controllers by runnning the commands below.

If the replication health is ok and the admin has required permission , he should be able to modify object AD from second domain controller.

repadmin /showrepl
repadmin /replsummary
dcdiag

---

Please don't forget to accept helpful answer