Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have 2 dc windows 2003: one is the master and it is called dc, the other is called fs and it is not synchronized with the master. On the fs server I stopped the service netlogon because I have had problems with the user's logon. The ad db is too old. On fs there are some events with the following ID: 13508 (replica file), 4000 (dns), [2089 (ntds replication, not enough reputation to post the link)

EVENT 2089 This directory partition has not been backed up since at least the following number of days. Directory partition:

CN=Schema,CN=Configuration,DC=domain,DC=com "Backup latency interval" (days):


It is recommended that you take a backup as often as possible to recover from accidental loss of data. However if you haven`t taken a backup since at least the "backup latency interval" number of days this message will be logged every day until a backup is taken. You can take a backup of any replica that holds this partition.

By default the "Backup latency interval" is set to half the "Tombstone Lifetime Interval". If you want to change the default "Backup latency interval" you could do so by adding the following registry key. "Backup latency interval" (days) registry key: System\CurrentControlSet\Services\NTDS\Parameters\Backup Latency Threshold (days).

Are there some cmd to force a resync from dc to fs ?

and what's the problem ? why the replica is stopped ?

thank you.

share|improve this question
Run DCPROMO on FS to demote it. Run DCPROMO on FS to promote it. –  joeqwerty Nov 18 '13 at 16:25
add comment

1 Answer

You can force AD replication between domain controllers applying following procedure from TechNet Force Replication Between Domain Controllers

Nevertheless I would like to ask you what do you mean when you say "... called fs and it is not synchronized with the master" If you have an Active Directory with 2 domain controllers both of them must be always synced, and if that's not the case you have a problem.

I encourge you to review this article in order to perform some troubleshooting and keep your DC's always as healthy as you can: Diagnosing and Troubleshooting Active Directory Problems

share|improve this answer
The server named "fs" is desynchronized to the server named "dc". The server dc is the updated active directory domain controller. –  Luigi Nov 18 '13 at 14:22
@Luigi, but is that server ("fs") actually a domain controller?. I'm sorry but I do not understand the term "desynchronized" if we are talking about AD, since if that is the situation, it is far from being a healthy situation for AD. If you are referring to another service, like DFS or something like this then it would be a different situation. Nevertheless it would be good if you could follow procedure I posted in my aswer or run the DCDiag /alltest in both domain controllers. –  SantiFdezMunoz Nov 18 '13 at 14:30
I am sorry, my english is very creative :-p - well the dc and fs are both domain controller, but the dc is the updated one. The fs is a domain controller with an old active directory db so that I switched off the netlogon service. If I start netlogon on fs I have many problems with domain users logon. Because the db is very old and the passwords does not match or miss some groups/users. I think the problem is 8-9 months old. On the dc server the AD db is updated and works well. –  Luigi Nov 18 '13 at 15:07
@Luigi it was not a problem about the word itself ;) it was about the concept. Nevertheless you are right when you say that the problem is that the DB is too old. You definetelly should read my second link and also run the "DCDiag /alltest" command. I also think that this link could also be useful: support.microsoft.com/kb/824449. Hope this helps! –  SantiFdezMunoz Nov 18 '13 at 15:20
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.