Re: NTDS Replication Event ID 1083/1955

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Paul,

Here is the output from repadmin. Sample System, DS and app events follow.
FRS log had no errors.

Thanks


Atlanta\S1

DC Options: IS_GC

Site Options: (none)

DC object GUID: f0b7c258-a389-4fa7-8832-06cba86116e9

DC invocationID: dec8d37c-07d3-4091-abae-5da6d2a1734e



==== INBOUND NEIGHBORS ======================================



CN=Configuration,DC=domain,DC=local

Atlanta\DC4 via RPC

DC object GUID: 55682bc7-a697-4320-96fe-e642f71491e3

Address: 55682bc7-a697-4320-96fe-e642f71491e3._msdcs.domain.local

DC invocationID: 46fd6aa2-6867-445b-958a-4a5c9e216435

SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE

USNs: 7963335/OU, 7963335/PU

Last attempt @ 2009-02-04 14:59:56 was successful.

Wilmington\DC3 via RPC

DC object GUID: b4ea10d6-3954-4c34-bba2-dd8ef6d0d0b0

Address: b4ea10d6-3954-4c34-bba2-dd8ef6d0d0b0._msdcs.domain.local

DC invocationID: 9f5e5cc0-e81b-4b4f-8111-02a2d393d0cb

DO_SCHEDULED_SYNCS WRITEABLE COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS

USNs: 18506457/OU, 18506457/PU

Last attempt @ 2009-02-04 14:59:56 was successful.

Houston\S3 via RPC

DC object GUID: cd5156a4-ac24-4933-aa26-bfcb778383dc

Address: cd5156a4-ac24-4933-aa26-bfcb778383dc._msdcs.domain.local

DC invocationID: ee583c35-8e7d-46e9-8f5c-ea0cda6da726

DO_SCHEDULED_SYNCS WRITEABLE COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS

USNs: 2197856/OU, 2197856/PU

Last attempt @ 2009-02-04 14:59:56 was successful.

Westminster\S4 via RPC

DC object GUID: d8ccc8df-9d4a-4492-9f49-e5a8f8de92b1

Address: d8ccc8df-9d4a-4492-9f49-e5a8f8de92b1._msdcs.domain.local

DC invocationID: d929c9ea-2a85-4305-9bf3-fe51db1a54c9

DO_SCHEDULED_SYNCS WRITEABLE COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS

USNs: 993606/OU, 993606/PU

Last attempt @ 2009-02-04 14:59:56 was successful.



CN=Schema,CN=Configuration,DC=domain,DC=local

Atlanta\DC4 via RPC

DC object GUID: 55682bc7-a697-4320-96fe-e642f71491e3

Address: 55682bc7-a697-4320-96fe-e642f71491e3._msdcs.domain.local

DC invocationID: 46fd6aa2-6867-445b-958a-4a5c9e216435

SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE

USNs: 7963283/OU, 7963283/PU

Last attempt @ 2009-02-04 14:59:56 was successful.

Wilmington\DC3 via RPC

DC object GUID: b4ea10d6-3954-4c34-bba2-dd8ef6d0d0b0

Address: b4ea10d6-3954-4c34-bba2-dd8ef6d0d0b0._msdcs.domain.local

DC invocationID: 9f5e5cc0-e81b-4b4f-8111-02a2d393d0cb

DO_SCHEDULED_SYNCS WRITEABLE COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS

USNs: 18506457/OU, 18506457/PU

Last attempt @ 2009-02-04 14:59:56 was successful.

Houston\S3 via RPC

DC object GUID: cd5156a4-ac24-4933-aa26-bfcb778383dc

Address: cd5156a4-ac24-4933-aa26-bfcb778383dc._msdcs.domain.local

DC invocationID: ee583c35-8e7d-46e9-8f5c-ea0cda6da726

DO_SCHEDULED_SYNCS WRITEABLE COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS

USNs: 2197842/OU, 2197842/PU

Last attempt @ 2009-02-04 14:59:56 was successful.

Westminster\S4 via RPC

DC object GUID: d8ccc8df-9d4a-4492-9f49-e5a8f8de92b1

Address: d8ccc8df-9d4a-4492-9f49-e5a8f8de92b1._msdcs.domain.local

DC invocationID: d929c9ea-2a85-4305-9bf3-fe51db1a54c9

DO_SCHEDULED_SYNCS WRITEABLE COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS

USNs: 993577/OU, 993577/PU

Last attempt @ 2009-02-04 14:59:56 was successful.



DC=student,DC=domain,DC=local

Houston\S3 via RPC

DC object GUID: cd5156a4-ac24-4933-aa26-bfcb778383dc

Address: cd5156a4-ac24-4933-aa26-bfcb778383dc._msdcs.domain.local

DC invocationID: ee583c35-8e7d-46e9-8f5c-ea0cda6da726

DO_SCHEDULED_SYNCS WRITEABLE COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS

USNs: 2197879/OU, 2197879/PU

Last attempt @ 2009-02-04 14:59:56 was successful.

Westminster\S4 via RPC

DC object GUID: d8ccc8df-9d4a-4492-9f49-e5a8f8de92b1

Address: d8ccc8df-9d4a-4492-9f49-e5a8f8de92b1._msdcs.domain.local

DC invocationID: d929c9ea-2a85-4305-9bf3-fe51db1a54c9

DO_SCHEDULED_SYNCS WRITEABLE COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS

USNs: 993624/OU, 993624/PU

Last attempt @ 2009-02-04 14:59:57 was successful.



DC=domain,DC=local

Atlanta\DC4 via RPC

DC object GUID: 55682bc7-a697-4320-96fe-e642f71491e3

Address: 55682bc7-a697-4320-96fe-e642f71491e3._msdcs.domain.local

DC invocationID: 46fd6aa2-6867-445b-958a-4a5c9e216435

SYNC_ON_STARTUP DO_SCHEDULED_SYNCS

USNs: 7963336/OU, 7963336/PU

Last attempt @ 2009-02-04 14:59:56 was successful.

Wilmington\DC3 via RPC

DC object GUID: b4ea10d6-3954-4c34-bba2-dd8ef6d0d0b0

Address: b4ea10d6-3954-4c34-bba2-dd8ef6d0d0b0._msdcs.domain.local

DC invocationID: 9f5e5cc0-e81b-4b4f-8111-02a2d393d0cb

DO_SCHEDULED_SYNCS COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS

USNs: 18506457/OU, 18506457/PU

Last attempt @ 2009-02-04 14:59:57 was successful.

Westminster\S4 via RPC

DC object GUID: d8ccc8df-9d4a-4492-9f49-e5a8f8de92b1

Address: d8ccc8df-9d4a-4492-9f49-e5a8f8de92b1._msdcs.domain.local

DC invocationID: d929c9ea-2a85-4305-9bf3-fe51db1a54c9

DO_SCHEDULED_SYNCS COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS

USNs: 993577/OU, 993577/PU

Last attempt @ 2009-02-04 14:59:57 was successful.



DC=admin,DC=domain,DC=local

Wilmington\DC3 via RPC

DC object GUID: b4ea10d6-3954-4c34-bba2-dd8ef6d0d0b0

Address: b4ea10d6-3954-4c34-bba2-dd8ef6d0d0b0._msdcs.domain.local

DC invocationID: 9f5e5cc0-e81b-4b4f-8111-02a2d393d0cb

DO_SCHEDULED_SYNCS COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS

USNs: 18506391/OU, 18506391/PU

Last attempt @ 2009-02-04 14:59:57 was successful.

Westminster\S4 via RPC

DC object GUID: d8ccc8df-9d4a-4492-9f49-e5a8f8de92b1

Address: d8ccc8df-9d4a-4492-9f49-e5a8f8de92b1._msdcs.domain.local

DC invocationID: d929c9ea-2a85-4305-9bf3-fe51db1a54c9

DO_SCHEDULED_SYNCS COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS

USNs: 993577/OU, 993577/PU

Last attempt @ 2009-02-04 14:59:57 was successful.





Microsoft (R) Windows Script Host Version 5.6
Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.


------------------------------------------------------------------------------
Listing the events in 'system' log of host 'S1'
------------------------------------------------------------------------------
Type: Error
Event: 5805
Date Time: 1/21/2009 10:13:05 AM
Source: NETLOGON
ComputerName: S1
Category: None
User: N/A
Description: The session setup from the computer 09STUNTB19825 failed to
authenticate. The following error occurred: Access is denied.

Type: Error
Event: 5723
Date Time: 1/21/2009 10:09:33 AM
Source: NETLOGON
ComputerName: S1
Category: None
User: N/A
Description: The session setup from computer '09STUNTB19825' failed because
the security database does not contain a trust account '09STUNTB19825$'
referenced by the specified computer. USER ACTION If this is the first
occurrence of this event for the specified computer and account, this may be
a transient issue that doesn't require any action at this time. Otherwise,
the following steps may be taken to resolve this problem: If
'09STUNTB19825$' is a legitimate machine account for the computer
'09STUNTB19825', then '09STUNTB19825' should be rejoined to the domain. If
'09STUNTB19825$' is a legitimate interdomain trust account, then the trust
should be recreated. Otherwise, assuming that '09STUNTB19825$' is not a
legitimate account, the following action should be taken on '09STUNTB19825':
If '09STUNTB19825' is a Domain Controller, then the trust associated with
'09STUNTB19825$' should be deleted. If '09STUNTB19825' is not a Domain
Controller, it should be disjoined from the domain.

Type: Error
Event: 4
Date Time: 1/19/2009 4:28:52 PM
Source: Kerberos
ComputerName: S1
Category: None
User: N/A
Description: The kerberos client received a KRB_AP_ERR_MODIFIED error from
the server 08VN201-22406$. The target name used was
cifs/08VN218-20794.subdomain2.domain.local. This indicates that the password
used to encrypt the kerberos service ticket is different than that on the
target server. Commonly, this is due to identically named machine accounts
in the target realm (subdomain2.domain.local), and the client realm. Please
contact your system administrator.

Type: Error
Event: 7026
Date Time: 1/19/2009 2:00:02 PM
Source: Service Control Manager
ComputerName: S1
Category: None
User: N/A
Description: The following boot-start or system-start driver(s) failed to
load: i8042prt

Type: Error
Event: 5805
Date Time: 1/22/2009 8:37:26 AM
Source: NETLOGON
ComputerName: S1
Category: None
User: N/A
Description: The session setup from the computer 09STUNTB19825 failed to
authenticate. The following error occurred: Access is denied.

Type: Error
Event: 5723
Date Time: 1/22/2009 9:16:23 AM
Source: NETLOGON
ComputerName: S1
Category: None
User: N/A
Description: The session setup from computer 'NTBSTU22752' failed because
the security database does not contain a trust account 'NTBSTU22752$'
referenced by the specified computer. USER ACTION If this is the first
occurrence of this event for the specified computer and account, this may be
a transient issue that doesn't require any action at this time. Otherwise,
the following steps may be taken to resolve this problem: If
'NTBSTU22752$' is a legitimate machine account for the computer
'NTBSTU22752', then 'NTBSTU22752' should be rejoined to the domain. If
'NTBSTU22752$' is a legitimate interdomain trust account, then the trust
should be recreated. Otherwise, assuming that 'NTBSTU22752$' is not a
legitimate account, the following action should be taken on 'NTBSTU22752':
If 'NTBSTU22752' is a Domain Controller, then the trust associated with
'NTBSTU22752$' should be deleted. If 'NTBSTU22752' is not a Domain
Controller, it should be disjoined from the domain.

Type: Error
Event: 5722
Date Time: 1/23/2009 3:09:20 PM
Source: NETLOGON
ComputerName: S1
Category: None
User: N/A
Description: The session setup from the computer 09NTB23561 failed to
authenticate. The name(s) of the account(s) referenced in the security
database is 09NTB23561$. The following error occurred: Access is denied.



------------------------------------------------------------------------------
Listing the events in 'directory service' log of host 'S1'
------------------------------------------------------------------------------
Type: Error
Event: 1126
Date Time: 10/20/2008 3:40:29 PM
Source: NTDS General
ComputerName: S1
Category: Global Catalog
User: NT AUTHORITY\ANONYMOUS LOGON
Description: Active Directory was unable to establish a connection with the
global catalog. Additional Data Error value: 1792 An attempt was made to
logon, but the network logon service was not started. Internal ID: 3200cf3
User Action: Make sure a global catalog is available in the forest, and is
reachable from this domain controller. You may use the nltest utility to
diagnose this problem.

Type: Error
Event: 1126
Date Time: 11/17/2008 3:34:45 PM
Source: NTDS General
ComputerName: S1
Category: Global Catalog
User: NT AUTHORITY\ANONYMOUS LOGON
Description: Active Directory was unable to establish a connection with the
global catalog. Additional Data Error value: 1792 An attempt was made to
logon, but the network logon service was not started. Internal ID: 3200cf3
User Action: Make sure a global catalog is available in the forest, and is
reachable from this domain controller. You may use the nltest utility to
diagnose this problem.

Type: Error
Event: 1126
Date Time: 12/22/2008 3:33:33 PM
Source: NTDS General
ComputerName: S1
Category: Global Catalog
User: NT AUTHORITY\ANONYMOUS LOGON
Description: Active Directory was unable to establish a connection with the
global catalog. Additional Data Error value: 1792 An attempt was made to
logon, but the network logon service was not started. Internal ID: 3200cf3
User Action: Make sure a global catalog is available in the forest, and is
reachable from this domain controller. You may use the nltest utility to
diagnose this problem.




------------------------------------------------------------------------------
Listing the events in 'application' log of host 'S1'
------------------------------------------------------------------------------

Type: Error
Event: 13
Date Time: 1/20/2009 5:59:24 AM
Source: AutoEnrollment
ComputerName: S1
Category: None
User: N/A
Description: Automatic certificate enrollment for local system failed to
enroll for one Domain Controller certificate (0x80070005). Access is denied.

Type: Error
Event: 1000
Date Time: 1/30/2009 10:51:02 AM
Source: Application Error
ComputerName: S1
Category: None
User: N/A
Description: Faulting application dcdiag.exe, version 5.2.3790.1830,
faulting module ntdll.dll, version 5.2.3790.3959, fault address 0x0002caa4.

Type: Error
Event: 1001
Date Time: 1/31/2009 11:06:24 AM
Source: Application Error
ComputerName: S1
Category: None
User: N/A
Description: Fault bucket 405751398.




--
Dudley
MCP, MCDST


"Paul Bergson [MVP-DS]" wrote:

Not sure why it won't pick up the next RID pool but you still haev over 500
RID's so you are not in any immediate danger.

Have you noticed any error messages in the event logs on the dc - S1?

From S1 at a command prompt run the following:

repadmin.exe /showrepl s1 /verbose

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.


"Dudley" <Dudley@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8240237B-D010-4448-AAB5-8C0A741A57E5@xxxxxxxxxxxxxxxx
Paul,

Here are the netdiag results. The dcdiag results are in my last post:

FROM S1


.......................................

Computer Name: S3
DNS Host Name: S3.subdomain2.domain.local
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 15 Model 2 Stepping 5, GenuineIntel
List of installed hotfixes :
KB924667-v2
KB925398_WMP64
KB925902
KB927891
KB929123
KB930178
KB931784
KB932168
KB933729
KB933854
KB935839
KB935840
KB936021
KB936357
KB936782
KB938127
KB938127-IE7
KB938464
KB941569
KB941693
KB943055
KB943460
KB943485
KB944338-v2
KB944653
KB945553
KB946026
KB948496
KB948590
KB949014
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951748
KB952069
KB952954
KB953838-IE7
KB953839
KB954211
KB954600
KB955069
KB955839
KB956390-IE7
KB956391
KB956802
KB956803
KB956841
KB957095
KB957097
KB958215-IE7
KB958644
KB960714-IE7
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection 2

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : S3
IP Address . . . . . . . . : 10.32.1.55
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 10.32.1.1
Primary WINS Server. . . . : 10.96.1.10
Dns Servers. . . . . . . . : 10.96.1.41
10.96.1.10


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{E9902258-F0C2-4CA7-9726-A5D12710EF87}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed


IP loopback ping test. . . . . . . : Passed


Default gateway test . . . . . . . : Passed


NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation
Service', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed


DNS test . . . . . . . . . . . . . : Passed
PASS - All the DNS entries for DC are registered on DNS server
'10.96.1.41' and other DCs also have some of the names registered.
PASS - All the DNS entries for DC are registered on DNS server
'10.96.1.10' and other DCs also have some of the names registered.


Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{E9902258-F0C2-4CA7-9726-A5D12710EF87}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
NetBT_Tcpip_{E9902258-F0C2-4CA7-9726-A5D12710EF87}
The browser is bound to 1 NetBt transport.


DC discovery test. . . . . . . . . : Passed


DC list test . . . . . . . . . . . : Passed


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Passed


LDAP test. . . . . . . . . . . . . : Passed


Bindings test. . . . . . . . . . . : Passed


WAN configuration test . . . . . . : Skipped
No active remote access connections.


Modem diagnostics test . . . . . . : Passed

IP Security test . . . . . . . . . : Skipped

Note: run "netsh ipsec dynamic show /?" for more detailed information


The command completed successfully

FROM S3


.........................................

Computer Name: S1
DNS Host Name: S1.subdomain2.domain.local
System info : Microsoft Windows Server 2003 (Build 3790)
Processor : x86 Family 6 Model 11 Stepping 1, GenuineIntel
List of installed hotfixes :
KB911564
KB923810
KB924667-v2
KB925398_WMP64
KB925902
KB927891
KB929123
KB930178
KB931784
KB931836
KB932168
KB933729
KB933854
KB935839
KB935840
KB936021
KB936357
KB936782
KB938127-IE7
KB938464
KB941569
KB941693
KB943055
KB943460
KB943485
KB944653
KB945553
KB946026
KB948496
KB948590
KB949014
KB950762
KB950974
KB951066
KB951072-v2
KB951698
KB951748
KB952069
KB952954
KB953838-IE7
KB953839
KB954211
KB954600
KB955069
KB955839
KB956390-IE7
KB956391
KB956802
KB956803
KB956841
KB957095
KB957097
KB958215-IE7
KB958644
KB960714-IE7
Q147222


Netcard queries test . . . . . . . : Passed



Per interface results:

Adapter : Local Area Connection

Netcard queries test . . . : Passed

Host Name. . . . . . . . . : S1.subdomain1.domain.local
IP Address . . . . . . . . : 10.96.2.35
Subnet Mask. . . . . . . . : 255.255.0.0
Default Gateway. . . . . . : 10.96.1.1
Primary WINS Server. . . . : 10.96.1.10
Dns Servers. . . . . . . . : 10.96.1.41
10.96.1.10


AutoConfiguration results. . . . . . : Passed

Default gateway test . . . : Passed

NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WINS' names is missing.

WINS service test. . . . . : Passed


Global results:
.

Relevant Pages

  • Re: NTDS Replication Event ID 1083/1955
    ... Wilmington\DC3 via RPC ... USNs: 18506457/OU, 18506457/PU ... occurrence of this event for the specified computer and account, ... Category: Global Catalog ...
    (microsoft.public.windows.server.active_directory)
  • Re: NTDS Replication Event ID 1083/1955
    ... Wilmington\DC3 via RPC ... USNs: 18506457/OU, 18506457/PU ... If '09STUNTB19825' is a Domain Controller, ... Category: Global Catalog ...
    (microsoft.public.windows.server.active_directory)
  • Re: NTDS Replication Event ID 1083/1955
    ... If the RID master cannot be contacted, and the RID pool drops below 20 percent, the Directory Service event log shows the following event message: ... List of DCs in pseudo-random order taking into account SRV priorities ... Wilmington\DC3 via RPC ... USNs: 18506457/OU, 18506457/PU ...
    (microsoft.public.windows.server.active_directory)
  • Re: NTDS Replication Event ID 1083/1955
    ... If the RID master cannot be contacted, and the RID pool drops below 20 percent, ... List of DCs in pseudo-random order taking into account SRV priorities ... Wilmington\DC3 via RPC ... USNs: 18506457/OU, 18506457/PU ...
    (microsoft.public.windows.server.active_directory)
  • Re: NTDS Replication Event ID 1083/1955
    ... If the RID master cannot be contacted, and the RID pool drops below ... List of DCs in pseudo-random order taking into account SRV ... Wilmington\DC3 via RPC ... USNs: 18506457/OU, 18506457/PU ...
    (microsoft.public.windows.server.active_directory)