0
votes
2answers
51 views

Can't get AD inter-site replication to work over VPN

Background: We have a single-forest single-domain AD for our little company. We have two geographically separated sites with different subnets. Both sites have been added as sites with appropriate ...
4
votes
2answers
91 views

How to force active directory replication from one DC to another

I am having issues replicating AD from one DC to another. Both servers are Windows Server 2008 R2 SP1. I have used the GUI option in sites and service to force replication. I have also tried repadmin, ...
-3
votes
1answer
44 views

Building a Windows Server 2008 R2 (DNS, DHCP, AD, etc…) [closed]

I'm looking forward to build my own Windows Server 2008 R2 machine for a company that is in the process of establishment. I have some questions regarding the Windows Server. I'm pretty new to it .. I ...
7
votes
1answer
125 views

one of the single dc per domain DCs has suffered USN rollback

I've inherited an Active Directory forest that is laid out very badly. It has a single forest with a domain tree for each site, each with a single domain controller. No domain is a child of any ...
1
vote
3answers
104 views

GPO Replication SysVol Inaccessible on Windows Server 2003

In our current AD setup, we have the following Domain Controllers: DC1: Server 2012 R2, Operations Master (All roles) DC2: Server 2012 R2 Mailserver1: Server 2003, Also hosts Exchange 2007 The ...
0
votes
3answers
132 views

Group Policy not replicating - Server 2012

I have 2 DCs. Both are Server 2012. For some reason Group Policy does not replicate between them and the client keeps getting : The processing of Group Policy failed. Windows attempted to read the ...
0
votes
0answers
66 views

Active Directory replication over VPN - DNS resolution

I have looked around whether anyone had the same issue but so far have not seen anything that would help me. I have a homelab and two VMs (Windows 2k8r2) with public IP addresses hosted in remote ...
0
votes
2answers
150 views

No SYSVOL\NETLOGON on 2012 STD DC Server

I have 2 2012 servers. I found out there's no share of neither SYSVOL nor NETLOGON on the BDC. I'm getting many 5002: The DFS Replication service encountered an error communicating with partner ...
3
votes
2answers
114 views

Unable to Delete User Object in AD windows server 2008

OS - Window Server 2008 ( Domain Controller ) One User Object in AD is Creating Problem as well as i am unable to delete it manually also. Please see the below Error. In Event viewer i am getting ...
1
vote
0answers
87 views

Replication issue caused by bad DNS entry in _msdcs

We have 3 DCs in our domain. One of the DCs died (wouldn't boot) two weeks ago. We performed metadata cleanup to remove the old DC from AD. Then we built a new DC with a new name (we used the same IP ...
0
votes
1answer
63 views

replica between dc failed

I have 2 dc windows 2003: one is the master and it is called dc, the other is called fs and it is not synchronized with the master. On the fs server I stopped the service netlogon because I have had ...
8
votes
1answer
178 views

Why would a domain controller encouter a USN rollback after an unclean shutdown?

I have this Windows Server 2008 R2 domain controller running on a physical Dell server, model PowerEdge R510. There are some electrical problems around here, thus a black-out is, unfortunately, quite ...
0
votes
0answers
39 views

Can Active Directory notify my on changes?

We have a corporate Active Directory and a secondary service that contains user profiles from Active Directory. We have a regular Sync Operation that copies stuff from Active Directory to our profile ...
7
votes
2answers
200 views

How can I save a domain controller after a USN rollback without rebuilding the whole server?

Today I had (again...) to lobotomize a domain controller which had suffered the dreaded USN rollback; the standard solution to this issue is to demote it and then promote it back again, but the main ...
0
votes
1answer
73 views

No replication between two DCs, tomestoned?

A site-to-site VPN has been down between two sites for around 120days, which means the DC at the peer site hasn't had any inbound replication from the main site DC. When does the DC object get ...
1
vote
1answer
63 views

How does AD decided when to enable SyncOnStartup for inbound replication partners

I have been playing with the MSAD_ReplNeighbor wmi class for monitoring AD replication. I have a hub and spoke, single domain topology where three DCs are in the spoke site. One holds all the master ...
1
vote
0answers
701 views

AD Replication Errors / KCC - Between two Domain Controllers

I'm having quite an issue that began a few days ago. Let me just lay out exactly what happened - also I've inherited this environment, please keep that in mind. 1st Domain Controller - Windows ...
1
vote
2answers
1k views

What is the correct way to configure AD replication in a hub-spoke design

Our AD is a basic hub/spoke design. We have a headquarters in London, and remote offices. The remote offices are connected via VPN to HQ. We have 3 domain controllers at HQ, and one in each remote ...
1
vote
1answer
658 views

Active Directory Replication Bandwidth Consumption

There are lots of articles out there describing how to architect your replication toplogy, and all the reasons why, and they all boil down to conserving bandwidth, and achieving a convergence time ...
0
votes
1answer
324 views

Path to gpt.ini missing

I am seeing the 1030 and 1058 errors for a remote Windows Server 2003 domain controller. Specifically the 1058 error says: > Event Type: Error Event Source: Userenv Event Category: None Event ...
0
votes
1answer
292 views

Force replication of Netlogon

I have added a batchfile to the the NETLOGON directory for some start-up scripts. The script is tiny in size. I have waited hours for the files to be replicated to the other Domain Controllers but ...
3
votes
1answer
2k views

Repadmin gives operational error 58

While testing some remote DC's, "repadmin /replsummary" ended with an error of Experienced the following operational errors trying to retrieve replication information: 58 - ...
3
votes
3answers
4k views

New Domain controller is having trouble replicating from an existing DC, 13508 Event ID for FRS

This question is related to a previous one I asked regarding backing up Domain Controllers and RODC's. Basically I am making some changes in regards to the DC's in my network. I am looking to add a ...
4
votes
3answers
1k views

How do I configure active directory when Sql Server 2012 is using a Virtual Account?

I'm getting the following event log entry from Sql Server 2012: SQL Server Scheduled Job 'Replication agents checkup' - Status: Failed - Invoked on: 2012-08-04 10:00:00 - Message: The job failed. ...
3
votes
1answer
761 views

Quickly change Active Directory Replication Schedule for all Sites & Sitelinks

My company has more than 80 sites, and my predecessor for reasons unknown to me put in a large chunk of time preventing replication between the HQ's DC and the branches' RODC. I need to reset their ...
0
votes
1answer
71 views

Weird Active Directory behavior after ADMT migration

We have multiple sites with multiple DC's. Since performing the migrations we have been experiencing all sorts of problems with DFSR etc. We have multiple objects in the AD .. DCNAME ...
5
votes
2answers
9k views

Why is GPO Tool reporting a GPO version mismatch when the GPO version #'s do match?

Any ideas why the group policy diagnostic utility GPOTool would report a GPO version mismatch between two domain controllers if the version numbers are a match? Policy {GUID} Error: Version mismatch ...
0
votes
2answers
4k views

Exchange 2010 don't see its PDC (same machine)

I have two 2008 R2 servers which should replicate AD. One si production server, second backup. On primary server is also Exchange 2010. There were plans about a year ago to install exchange to backup ...
0
votes
2answers
3k views

Active Directory Cross-Site Replication Speed - Should I select Preferred Bridgehead Servers?

I have 2 sites. Site1 with 2 DCs and Site2 with 1 DC. If I create a new user on Site1 the 2 DCs replicate the user instantly. The Site2 DC doesn't get the new user replicated to it until some time ...
0
votes
1answer
600 views

dnslint and redadmin, why and when?

A pretty small query really - dnslint and repadmin - what really differentiates these tools in terms of troubleshooting replication? When and why would you use either one.
1
vote
3answers
2k views

Active Directory Replication across Sites slow or not working

I've just inherited (isn't it always the way!) a Windows Domain. The domain is spread across 2 sites. Site01 has 3 DCs & Site02 has 2 DCs. If I create a user in either site, the other DCs in ...
2
votes
2answers
216 views

Windows Server 2003: Replication between DC's takes place only after changes are made?

I just finished the 70-294 Kit, and I am left with a huge knownegde gap: The instructor says that replication taked place 15 seconds after a change is made, and 3 seconds addition for any additional ...
4
votes
1answer
258 views

Adding a new location through Active Directory. How should it be done?

Our entire Active Directory forest is currently on a single 10/8 private subnet. We're looking to migrate most of our servers to a cloud provider, but I'm not sure how to set up the first domain ...
4
votes
2answers
209 views

Is there a safe way to bypass a non-replicating DC?

We have a domain controller that was virtualized a while back; this caused issues with replication that we're now seeing fallout from. I've moved the PDC Emulator and other fsmo roles to a new DC and ...
3
votes
1answer
128 views

What are possible results/side effects if replication between DC's in a Windows domain is unable to occur?

There's plenty of administration literature out there how to properly manage Windows servers. But in dealing with real life, things don't always occur like you want them to. In Microsoft's Windows ...
1
vote
1answer
246 views

DFS Replication, Losing folders

We lost a lot of folders in one part of our AD. I tracked down that we get a lot of errormessages about this in this form: How do we solve this? Why does this happen? (Some information edited) ...
2
votes
1answer
179 views

Secure Microsoft Active Directory DC to DC communications through firewall boundaries

We are currently looking to flatten our AD structure a bit to make things a bit more manageable, but we still want to keep our security posture as near as possible to where it is now. Currently, we ...
1
vote
2answers
1k views

Server 2008 DC rejecting replication requests

Have a DC that has recently been part of a business continuity test. From what I understand the server (which is virtual) was snapshotted, test carried out while the link between the two sites was ...
2
votes
3answers
622 views

Active Directory set up with replication — need a way to control login authentication host

I have two Active Directory servers set up with replication, ad2 and ad4. ad4 has a higher latency than ad2 as it is offsite. All clients are supposed to log in and authenticate to the ad2 server. The ...
1
vote
1answer
258 views

Can a DC Computer Account be recreated?

We have a problem with an active directory, Aftrer some replication issues existing over the years, the first dc has no DC Computer account in the same domain on the other dcs. So is it possible to ...
1
vote
2answers
910 views

Why can't I replicate DNS zones to non-DC DNS servers?

I've installed Windows Server 2008R2 Enterprise Edition with SP1 on two computers: 1) My primary domain controller. 2) A dedicated DNS server. My DNS server is not a domain controller, but it has ...
3
votes
3answers
2k views

AD Replication Monitor

Is there something like Replication Monitor (in Windows 2000) available in Windows 2008 R2? What tool do you use to check replication health?
0
votes
2answers
266 views

Will AD automatic replication ALWAYS respect site link setting?

I know when you manually kick off Repadmin and specify source/destination DC it's going to ignore any site, site link and site link bridge settings as long as the DCs are reachable over RPC to each ...
11
votes
4answers
762 views

Has anyone ever used SMTP site links?

A simple real-life question, inspired by a comment here: Active Directory has supported inter-site replication using SMTP instead of direct RPC since its first introduction in Windows 2000. But did ...
3
votes
1answer
473 views

What is the best way to copy production Active Directory back to pre-production / staging?

I'm setting up a preproduction environment as a copy of production. The first time this was done, a very long time ago, when staging/preprod environment was created, we spun up an AD virtual machine, ...
0
votes
2answers
371 views

Windows server AD replication

We have run dcdiag on our Windows server 2003 AD domain controller and replication seems to be down (output below). Testing server: Tradeston\PNC4SERVER Starting test: Replications ...
0
votes
2answers
620 views

Manually Removing a Replicate Domain Controller

I have a single domain environment on Active Directory, Windows Server 2003. I created a replicate domain controller to put on a remote LAN connected via site-to-site vpn. I shipped the server but ...
1
vote
1answer
619 views

Replication issue between two servers, one SBS 2008

Running an SBS 2008 server for a client, who added a new office. I set up a Windows 2008R2 server at the new office, which was promoted to domain controller and GC (logon) server. Both servers are ...
11
votes
4answers
1k views

Windows Domain replication monitoring tool

I am looking for web-based interface GUI, or some kind of monitoring tool that will show replication status for a domain. I know I can use repadmin with various options on the command line to query ...
0
votes
1answer
222 views

Windows Server 2008 - AD Replication

I have 3 Windows Server 2008 servers. Here's the breakdown... 1.) Windows 2008 Standard - Configured as primary AD, DNS and File server 2.) Windows 2008 Enterprise - Secondary DNS / Lansweeper 3.) ...