Re: AD Replication errors

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: checchim (checchim_at_discussions.microsoft.com)
Date: 09/07/04 

Date: Tue, 7 Sep 2004 10:29:08 -0700

Hey Ace,

I think I've finally got this problem licked! After doing a bit more
investigation and drilling down into repadmin a bit, it came to me that the
error that I was seeing most often referenced the missing _msdcs guids. I
recreated CNAME records for all DCs on all DCs and replication kicked in
immediately.

Thanks for all the help with this!
Michelle

"Ace Fekay [MVP]" wrote:

> In news:E5C1007F-F5D8-42B4-90C1-821039EDD109@microsoft.com,
> checchim <checchim@discussions.microsoft.com> made a post then I commented
> below
> > I've run some additional tests on the servers and here ares some of
> > the results I've gotten, some I thought helpful, some rather curious.
> >
> > In running netdiag /v on the server
> <snip>
> >
> > I've also read on another tech board that perhaps part of my problem
> > is that the previous admin removed all DCs from the default DC OU and
> > placed them within OUs she created for each site. Could this
> > possibly be the problem? Hopefully the logs I've posted shed some
> > light on the issue.
> >
> > Michelle
>
>
> It could be part of the problem moving them. The Degault Domain Controllers
> OU has the Default Domain COntrollers GPO. For starters, that controls
> security, among other things. Put them all back where they belong please!
> That has nothng to do with Sites.
>
> What else was changed? ANy services turned off or disabled?
> Is there a firewall somewhere between these machines?
>
> --
> Regards,
> Ace
>
> Please direct all replies ONLY to the Microsoft public newsgroups
> so all can benefit.
>
> This posting is provided "AS-IS" with no warranties or guarantees
> and confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
> Microsoft Windows MVP - Windows Server - Directory Services
>
> Security Is Like An Onion, It Has Layers
> HAM AND EGGS: A day's work for a chicken;
> A lifetime commitment for a pig.
> --
> =================================
>
>
>

Relevant Pages

  • Re: Slow site performance
    ... need to have that enabled, make both DCs GCs, you don't have more ... the other DC in the other site, or any other member server. ... Group membership caching is enabled on both domain controllers. ... I tried another workstation and experienced the same ...
    (microsoft.public.windows.server.active_directory)
  • Re: smtp ques hang
    ... Exchange or DCs? ... If it's some sort of DNS record issue; ...  The following domain controllers were identified by the query: ...
    (microsoft.public.exchange.admin)
  • Re: User get access denied error when prompted to change password adte Reset
    ... If you enable auditing of account management in the ... Domain Controller Security Policy, you may find useful info in the security ... make sure that the domain controllers do NOT have the ...
    (microsoft.public.win2000.security)
  • Re: Continual errors - Event ID 1030 and 1058 on DC
    ... This article will help you check the security rights on the sysvol ... Domain controllers have the read and apply rights to the Domain ... Controllers Policy. ...
    (microsoft.public.windows.group_policy)
  • Re: Blocking port scans on local network
    ... You can implement enumeration of SAM accounts and shares with probably no ... on domain controllers via Domain Controller Security Policy depending of ... domain computer that has a "require" ipsec policy assigned to it. ... between domain computers and domain controllers as the domain controllers ...
    (microsoft.public.win2000.security)