Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

NTDS Replication Error -- URGENT!

Posted on 2007-03-19
6
640 Views
Last Modified: 2008-05-30
I'm receiving errors with regards to Active Directory. My C: drive became full on my server, and in order to enlarge the C: drive I will have to take the server down (this will need to be done off hours), so in the mean time I uninstalled some unnecessary applications (MS Office) and freed up over 1GB of space. I keep on receiving the following error messages in my Directory Service Event log:

3/19/2007      10:53:20 AM       
NTDS Replication      
Error      Replication       1480      
Everyone      
MAIDFILE
Replication error: The directory replication agent (DRA) couldn't update object CN={{USERNAME}},CN=Users,DC={{DOMAIN}},DC=com (GUID 3a14c5e4-b115-4ff5-b653-43f1d9f37a3b) on this system with changes which have been received from source server 86a15b08-4f93-413a-bc38-69bd58117c2a._msdcs.{{DOMAIN}}.com. The disk containing the database is full.

And the following error message in my DNS Event Log:
3/19/2007      8:26:15 AM      
DNS      
Error      None      4015      
N/A      
MAIDFILE      
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The event data contains the error.

Can someone help me resolve these issues, are they inter-related?
0
Comment
Question by:maidstone
  • 2
  • 2
6 Comments
 

Author Comment

by:maidstone
ID: 18748564
FYI:
I have two domain controllers (both running Windows 2000). This error message is appearing on the main dc. the second dc we recently migrated it to a virtual machine, probably around the same time as when this issue began to occur.
0
 
LVL 13

Accepted Solution

by:
Kini pradeep earned 500 total points
ID: 18754064
Hmm.
what is the size of the Active directory database ?
that would be C;\winnt\ntds\Ntds.dit.
now boot in AD restore mode and perform the following steps to check the database integrity.
type ntdsutil files integrity.
if it completes without any errors reboot in the normal mode.
if it does return errors perform the semantic database analysis .
ntdsutil "sem d a" go
if any error detected then type
ntdsutil "sem d a" "go f"
and you might have to perform an offline defrag of the AD database.
http://support.microsoft.com/kb/232122/
also once you have booted in the normal mode make sure that the replication is working fine, if the Dc's are in the same site then check replication using the AD sites and services.
else use replmon.
can you also run Dcdiag /v and pipe it into a text file and please post the Dcdiag.

====================================================================================
Note: please make sure that you have a good backup before performing the offline defrag and also maintain the original ntds.dit before replacing it with the defragged one.
0
 

Author Comment

by:maidstone
ID: 18755688
Thanks for your response.
I was able to rectify this issue by rebooting my system and going into Directory Services Restore Mode and ensuring there was enough space on C:
0
 
LVL 13

Expert Comment

by:Kini pradeep
ID: 18758214
Np, YW
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question