How would you troubleshoot the following scenario?
What are some useful steps to take, and what should you look out for?

There are four domain controllers, two in one site and two in another site. Since the upgrade from Windows Server 2008 to Windows Server 2008 R2, Active Directory replication has stopped between the sites, however replication continues between the DCs on the same LAN.

There's an ISA Server 2006 in the middle, however whether replication traffic is being blocked or even seen by the ISA Server is not known yet. Administrators report some form of RPC errors (in Directory Services logs?). The ISA firewall policy was allowing RPC traffic before the upgrade.

Useful resources
How to troubleshoot intra-site replication failures

Using Repadmin.exe to troubleshoot Active Directory replication

Troubleshooting replication with repadmin

I'll add more detail as soon as I get it.

  • Did you upgrade the forest functional level ? Feb 5, 2010 at 8:42
  • @mathieu-chateau I don't know yet, but I would guess so. How would this explain the inter-site replication problem?
    – nray
    Feb 5, 2010 at 11:54

1 Answer 1


Restarting the ISA Server without modifying the firewall policy fixed the problem, which seemed to be that the (custom) protocol definition for Microsoft RPC traffic between the sites wasn't correctly identifying allowed traffic.

It is possible that simply deleting the open sessions in the ISA Server between domain controllers would be enough, which would then be re-established, but rebooting had the same effect.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.