AD replication error



Hi all

I have 3 DC and 2 site. Site is connected via internet and 2 ISA2000 server.

Stie1 --- Site2
DC1 -- ISA2000 --- INTERNET ---- ISA2000 --- DC2 --- DC3

I can not connect from computers located in site1 to admin share (c$ and
admin$) on my DC2 but I can connect to share d$.
After this problem DC log replication error

--------------------------
Event Type: Error
Event Source: NTDS KCC
Event Category: Knowledge Consistency Checker
Event ID: 1311
Date: 2005-05-30
Time: 09:48:08
User: N/A
Computer: DC1
Description:
The Directory Service consistency checker has determined that either (a)
there is not enough physical connectivity published via the

Active Directory Sites and Services Manager to create a spanning tree
connecting all the sites containing the Partition

DC=mydomain,DC=com,DC=pl, or (b) replication cannot be performed with one or
more critical servers in order for changes to propagate

across all sites (most often due to the servers being unreachable).

For (a), please use the Active Directory Sites and Services Manager to do
one of the following:
1. Publish sufficient site connectivity information such that the system can
infer a route by which this Partition can reach this site.

This option is preferred.
2. Add an ntdsConnection object to a Domain Controller that contains the
Partition DC=mydomain,DC=com,DC=pl in this site from a Domain

Controller that contains the same Partition in another site.

For (b), please see previous events logged by the NTDS KCC source that
identify the servers that could not be contacted.
--------------------------

When I reboot the DC2 all works again for 2-4 day
then it fails again.


.



Relevant Pages

  • Can not connect to admin share on DC from other site
    ... admin$) on my DC2 but I can connect to share d$. ... across all sites (most often due to the servers being unreachable). ... infer a route by which this Partition can reach this site. ... When I reboot the DC2 all works again for 2-4 day ...
    (microsoft.public.win2000.active_directory)
  • Can not connect to admin share on DC from other site
    ... admin$) on my DC2 but I can connect to share d$. ... across all sites (most often due to the servers being unreachable). ... infer a route by which this Partition can reach this site. ... When I reboot the DC2 all works again for 2-4 day ...
    (microsoft.public.isa.vpn)
  • Re: Can not connect to admin share on DC from other site
    ... > admin$) on my DC2 but I can connect to share d$. ... > there is not enough physical connectivity published via the ... > more critical servers in order for changes to propagate ... > infer a route by which this Partition can reach this site. ...
    (microsoft.public.win2000.active_directory)
  • Re: EventID 4521 warning after SP2 upgrade
    ... I first verified that none of my DNS zones were being stored in the ... DomainDnsZones partition (other that "." ... the servers which hold this partition have had an opportunity to ... see the DomainDnsZones zone getting populated with information, ...
    (microsoft.public.windows.server.dns)
  • Re: EventID 4521 warning after SP2 upgrade
    ... DomainDnsZones partition being messed up. ... This failed from and to all servers:( ... "All domain controllers in the domain" or "all DNS servers in the ... domain at the top of my forest. ...
    (microsoft.public.windows.server.dns)