Re: Replication Question

Tech-Archive recommends: Fix windows errors by optimizing your registry

Thanks, Chriss.

--
Ryan Hanisco
MCSE, MCDBA
FlagShip Integration Services
Chicago, IL

"Chriss3 [MVP]" <noSpamHere@xxxxxxxxxx> wrote in message
news:uKTGIo1TFHA.2172@xxxxxxxxxxxxxxxxxxxxxxx
> Note: Account disabling is not trigged as urgent replication. How ever
> Account Lockouts are trigged as urgent replication
>
> --
> Regards
> Christoffer Andersson
> Microsoft MVP - Directory Services
>
> No email replies please - reply in the newsgroup
> ------------------------------------------------
> http://www.chrisse.se - Active Directory Tips
>
> "Ryan Hanisco" <rhanisco@xxxxxxxxxxxxxx> skrev i meddelandet
> news:uoM6zuPTFHA.2756@xxxxxxxxxxxxxxxxxxxxxxx
>> Hi Paul,
>>
>> Some events like password changes, account disabling, and the like try to
>> replicate on a much faster timeline than the normally defined schedule.
>> you'll also see a difference between sites depending on your topology.
>>
>> To investigate problems, I would install the Support tools from the
>> server CD and start doing replmon reports to compare partition version
>> numbers and to look for problems. You may also follow up with verbose
>> runs of netdiag and dcdiag, though I think replmon will give you most of
>> what you want.
>>
>> --
>> Ryan Hanisco
>> MCSE, MCDBA
>> FlagShip Integration Services
>> Chicago, IL
>>
>> "Paul Johnston" <paul.johnston_nospam@xxxxxxxxxxx> wrote in message
>> news:e634715j3kn2dm8hdur4bnvfpl57j8f0qp@xxxxxxxxxx
>>> Hi
>>> We have three domain controllers and a while ago we had issues with
>>> replication times. I wrote a script which tells me the differences
>>> between the attribute values on different servers.
>>> I notice that some attributes seem to consistently be out of sync, see
>>> below
>>>
>>> < >badPasswordTime: 127589910191201395
>>> ---
>>>> >badPasswordTime: 127587429014680627
>>> 63c61
>>> < >lastLogon: 127590863771501047
>>> ---
>>>> >lastLogon: 127592261416607919
>>> 69c67
>>> < >logonCount: 1072
>>> ---
>>>> >logonCount: 1139
>>>
>>> Question
>>> Does AD replication have a priority in what it pushes for replication
>>> ?
>>> TIA Paul
>>
>>
>
>


.

Relevant Pages

  • Re: Replication Question
    ... Account disabling is not trigged as urgent replication. ... Microsoft MVP - Directory Services ...
    (microsoft.public.win2000.active_directory)
  • Re: Replicaton time
    ... I know how to change the tombstone threshold, but what media pushes it longer than 60 days by default? ... FlagShip Integration Services ... Joe Richards Microsoft MVP Windows Server Directory Services ... > I has one question about replication in Active directory for win 2003. ...
    (microsoft.public.win2000.active_directory)
  • Re: AD intersite replication lag - security problem?
    ... Note that some recent hot fixes change the urgent replication items. ... > change notification between sites for all connections that occur over that ... > destination and source domain controller pairs that otherwise use change ...
    (microsoft.public.win2000.security)
  • Re: Replication of password resets/unlocks
    ... Urgent queueing that triggers urgent ... replication, i'm not sure wht difference are you trying to make here because ... It is urgent queueing, not urgent replication. ... If it went straight to the PDC, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Problem with account lockout synchronization
    ... Account lockouts are in the "urgent replication" category but urgent ... > and the lockout-status of the account on all sites is "Locked". ...
    (microsoft.public.win2000.active_directory)