Chat now with support
지원 담당자와 채팅

Active Administrator 8.3 - Web Console User Guide

Active Administrator Web Console Overview Active Directory Health Alerts Notifications Active Directory Health Check
Using the Health Check landing page Creating a Health Check Setting options for Health Check tests Health check tests
Forest tests Domain tests Domain controller tests Site tests
Active Directory Topology Reports Network Operations Center

PDC master not responding

Indicates that the PDC (primary domain controller) operations master is not responding within the configured threshold.

Supported on: Windows Server® 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016
Required permissions: Domain user privilege is required.

This error can occur if any of the following occurs:

Active Directory® on the domain controller has failed in some way.

RID master not responding

Indicates that the relative identifier (RID) operations master is not responding within the configured threshold.

Supported on: Windows Server® 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016
Required permissions: Domain user privilege is required.

This error can occur if any of the following occurs:

Active Directory® on the domain controller has failed in some way.
Make sure the indicated domain controller actually exists. If it does not exist, run NTDSUTIL and select the metadata cleanup option to clean up the erroneous objects in the directory.

RID operations master inconsistent

Indicates that the relative identifier (RID) operations master is not consistent among all domain controllers in the domain.

Supported on: Windows Server® 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016
Required permissions: Domain user privilege is required.

The domain RID operations master is contained in the fSMORoleOwner property of the RID Manager object in the CN=System,DC=<domain> container. Every domain controller in the domain has a copy of the domain RID operations master. The RID operations master allocates sequences of RIDs to each of the various domain controllers in its domain. At any time, there can be only one domain controller acting as the RID master in each domain in the forest.

Whenever a domain controller creates a user, group, or computer object, the domain controller assigns the object a unique security ID (SID). The SID consists of a domain SID, which is the same for all SIDs created in the domain, and a RID, which is unique for each SID created in the domain. If the domain RID operations master is inconsistent, it is possible that two different domain controllers will assign overlapping RID ranges to other domain controllers in the domain, with potentially disastrous consequences.

The domain RID operations master can become inconsistent due to replication errors or if an administrator used NTDSUTIL.EXE to move the operations master when there was incomplete connectivity to all domain controllers in the domain.

Wait to see if the error clears. If an administrator has moved an operations master to another domain controller, replication to all domain controllers in the domain can take some time.

If the error does not clear, contact your Microsoft® Windows® support representative.

Root PDC time source missing

Indicates the PDC Role Owner of the root domain in the forest is not configured to use an external time source. All domain controllers in the forest synchronize their time by the clock of the PDC Role Owner.

Supported on: Windows Server® 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016
Required permissions: Domain user privilege is required and the target server must have WMI remote access enabled. The user must be a member of the Distributed COM Users group.

Since Active Directory®, by default, sets all the clocks on all of the domain controllers in the forest from the PDC Role Owner of the root domain, it is recommended that the domain controller be configured to synchronize its time with an external time source.

Use the w32time command at an elevated PowerShell® session to configure the PDC Role Owner to use an external time source.

Where TimeSource is one or more NTP servers noted by DNS or IP address. When TimeSource is a list of time servers the list must be enclosed in double quotes and each entry must be separated by at least one space. Some examples are listed below:

관련 문서