We have a Single AD Domain running with Windows 2003 server in Head office. Also, we have Additiona DCs servers located in remote site in different country, which is connected by VPN.
Site A (HQ)
Server A (PDC Emulator)
Server B (Additional DCs)
Server C (Additional DCs)
Site B (Remote site)
Server E (Additional DCs)
But it has the problem in Server B DCs only, when we check application log in event viewer.
Error Log: 1566, 1311 and 1865 (NDTS KCC)
Further, I also checked "Active Directory Sites and Services"
Replication:
Site B
Server E -- Server B
Site A
Server A -- Server B, Server C, Server E
Server B -- Server A, Sever C
Server C -- Server A, Sever B
And found "Sites --> Site B --> Server E --> NTDS Settings --> Connections (Replicate From Server B / Replicate To Server A)"
Normally Site connections should be auto generated for parallel. It means must have both connections for two sites (Server A <> Server E). But why Connections (Server E replicate From Server B / Server E replicate To Server A) ?
And I have used "dcdiag" and "repadmin /showrepl /latency <partion-dn>"
Result: kccevent failed
Overall...
1. <automatically generated> connetcion has a problem ?
2. Why error come out ? Why NTDS KCC error ?
3. Should we follow Error 133 suggestion to Add a new connection ?
<<<
User Action
Use Active Directory Sites and Services to perform one of the following actions:
- Publish sufficient site connectivity information so that the KCC can determine a route by which this directory partition can reach this site. This is the preferred option.
- Add a Connection object to a domain controller that contains the directory partition in this site from a domain controller that contains the same directory partition in another site.
If neither of the Active Directory Sites and Services tasks correct this condition, see previous events logged by the KCC that identify the inaccessible domain controllers.
>>>
4. Any further idea please ?
Thanks !