Synchronization problems with AD
Posted on 2007-11-27
Greetings to all
I run an all Server 2003 network on 2003 functional level for the domain and the forrest. I have 24 sites on different locations and some of these sites might have a DC or not, depending on the number of users in the office. All sites are connected via VPN using Cisco PIX. The WAN was configured by a vendor that setup the PIX to look at the main corporate office but not at the sites. In other words, at the VPN level the WAN is a "star" network and is not a mesh network. The WAN speeds per sites varies depending on the office (some DSL other T1's etc) but the VPN is network is very stable.
This brought some challenges with the AD setup of sites. Because the KCC don't know that the only place to look is "DOMAIN1" at the Corp office I had to create individual connection links for each office rather than grouping similar connections under one link. By doing so I had minimal event viewer messages and replication was taking place.
A few months ago this DOMAIN1 crashed. That server was holding all FSMO roles. I had a DOMAIN2 in place that took over the roles of DOMAIN1. DOMAIN1 was replaced by a new server. We use same name and same IP after doing a metada cleanup. Apparently, everything was normal again. However I'm getting a bunch of KCC errors specially in the last few weeks. Events 1865, 1311 and 1566 are the order of the day!.At the moment, all but one of the 24 sites receive any changes like new user accounts, new OU's etc. Some are not replicating changes back.
My goal and my question is, based on the information provided (and I can provide more details if needed) how can ensure that I have proper synchonization put in place and that specially this one site that is not getting anyhting can be brough up to date.
I'm sure the issue can be complex so any help will be gratly appreciated!