16

We have a domain with 3 DCs in different networks and we want to decomission one of them.

However, I suspect that the two remaining DCs will not replicate properly between each other due to some network misconfiguration. So I want to ensure that, after I switch off the obsolete DC, the two remaining ones will replicate flawlessly between each other.

I can ping between the two DCs without any problems, but I suspect replication might be a different story.

When I issue repadmin /showrepl dc1, it will only show the status of the previous replications with the DC I want to remove. The safe DC is not listed.

8

Have you tried DCDIAG? It has lots of tests including Checks for timely replication and any replication errors between domain controllers

Here is a link to Dcdiag information:

https://technet.microsoft.com/en-us/library/cc731968(v=ws.11).aspx

  • 1
    @MichaelBrown you should have a look at Oliver's screen capture in his link ... Just saying, don't want to get into a fight with Big John... – Andy K Jul 6 '17 at 9:55
  • DcDiag is better :) I want the points! – Michael Brown Jul 6 '17 at 9:56
  • I run dcdiag /e after every patch. I wouldn't say it's a lifesaver, but I do sleep better when it comes up clean. Someday I'll script it to run automatically. – CC. Jul 6 '17 at 21:14
8

To ensure two DCs replicate with each other, you can follow the guide Forcing Replication.

You first want to ensure that both clean DCs replicate with each other.

  1. Open Active Directory Sites and Services, navigate to your first DC and open the NTDS Settings.
  2. You will probably see a connection to the old DC. Add a new connection for the new DC. Now force replication with your other DC.

    enter image description here

    Repeat the process for the other DC.

  3. Now inspect replication results for your DCs:

    repadmin /showrepl dc1
    
  • DCDIAG is much better ;) – Michael Brown Jul 6 '17 at 9:56
  • @MichaelBrown Running that actually pointed me towards an unrelated issue. So, definitely very helpful. Thanks for bringing it to my attention. I went with this approach while waiting for dcdiag to finish and this gave me a very direct way to achieve what I was trying to do. – Der Hochstapler Jul 6 '17 at 9:58
3

You can also use the graphical utility MS has and checks all AD Forest for replication issues.

https://www.microsoft.com/en-us/download/details.aspx?id=30005

Thank you

  • Neat tool. But it seems to expire pretty quick: i.imgur.com/otGlKja.png The link leads to the same page you linked. – Der Hochstapler Jul 6 '17 at 17:39
  • That is weird I use this tool for very long time but never seen it expiring, MS might changed something I will recheck it. – Alexios Pappas Jul 6 '17 at 20:52
  • Yes as I suspected MS changed something in order the old version to expire. I assume soon they will update the site with 1.1 version that now their link points still to the wrong one. – Alexios Pappas Jul 6 '17 at 23:56
  • I'll surely try this again in the future. Thanks :) – Der Hochstapler Jul 7 '17 at 8:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.