RE: Help - Users can't log in ...



Hi,

Thanks for posting!

Based on the description, Please help me know the exact error message when
logging on to domain. Is there any error in Event log?

According to my research, you may use the following method verify the
replication of Active Directory.

The schema and infrastructure operations masters are used to introduce
forest and domain-wide schema changes to the forest and its domains that
are made by the Windows Server 2003 adprep utility. Verify that the domain
controller that hosts the schema role and infrastructure role for each
domain in the forest reside on live domain controllers and that each role
owner has performed inbound replication over all partitions since they were
last restarted.

Verify that the schema master and each infrastructure master have performed
inbound replication of Active Directory since last booted. Inbound
replication can be verified by using the REPADMIN /SHOWREPS DCNAME command,
where DCNAME is the NetBIOS computer name or the fully qualified computer
name of a domain controller.

For more detailed information, please refer to the following information:
How to upgrade Windows 2000 domain controllers to Windows Server 2003
http://support.microsoft.com/?id=325379

More information for your reference:
229896 Using Repadmin.exe to Troubleshoot Active Directory Replication
http://support.microsoft.com/?id=229896

318340 HOW TO: Verify That Active Directory Partitions Are Replicated
Properly
http://support.microsoft.com/?id=318340

812809 Windows 2000 SP4 Support Tools
http://support.microsoft.com/?id=812809

232072 Initiating Replication Between Active Directory Direct Replication
http://support.microsoft.com/?id=232072

321153 How to disable or enable Active Directory replication in Windows 2000
http://support.microsoft.com/?id=321153

888199 Replication may not completed successfully and event 1411 and event
1567
http://support.microsoft.com/?id=888199

If there is anything that is unclear, please feel free to let me know.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.




.



Relevant Pages

  • Re: AD sites and services
    ... A search for "Active Directory Sites" yeilds the following: ... After an Unsuccessful Domain Controller Demotion" ... http://support.microsoft.com?kbid=220140 "FRS Replication Protocol and Topology ... Windows 2000 Domain Controllers" ...
    (microsoft.public.win2000.active_directory)
  • Re: Why do i need to know AD ?
    ... DNS Support for Active Directory Technical Reference ... Is the directory service included in the Windows Server 2000/2003 family. ... controller to interact with domain controllers in the domain running Windows ... used to configure replication between sites. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Help - Users cant log in ...
    ... I ran adprep/forestprep & domain prep on windows 2000 server ... I loaded Active directory to the 2003 server and made it a second DC ... > replication of Active Directory. ...
    (microsoft.public.windows.server.migration)
  • Re: Active Directory Replication Issue
    ... Is the InterSite replication going on at all? ... Do this on all four Domain Controllers! ... Can you ping the Domain Controllers? ... Microsoft Active Directory MVP ...
    (microsoft.public.win2000.active_directory)
  • Re: Clients (random ones) unable to login to domain, reboot, then can?
    ... replication failure, and then repromote the sever back to being a DC. ... This network has 2 domain controllers, but 1 has been out of sync for ... Remote Desktop to the server, no problems, log out, and yet STILL ... Windows boots up like normal, prompts for name, pass, domain. ...
    (microsoft.public.windows.server.sbs)