troubleshooting Question

How would you check for consistency of the number of AD objects on all domain controllers in a domain

Avatar of JGaemedia
JGaemediaFlag for United States of America asked on
Active Directory
4 Comments1 Solution310 ViewsLast Modified:
We have a child domain which has around 35 domain controllers. We've found some inconsistencies between the number of objects in a few DCs. We've identified some  objects to be deleted contacts. They still exist on some DCs but not on others. We're not sure if this is happening with other objects such as groups, other user accounts, or computers.

Is there a way to do these things:

1. Compare status between all the DCs in the domain?
2. For the DCs that do not seem to be synchronized properly, find out which objects exactly are not being synchronized?

A few other things to note:
1. I didn't find any lingering object errors.
2. I know replmon can help, but it's really slow and running it on 35 DCs will take forever.
3. From the domain FSMO role holder, I created a new OU and put some of the objects that should be been deleted into it. This replicated out to all the DCs just fine.  This helped us verify replication. However, it did 'recreate' the 'deleted objects' on all the other DCs.
4. AD is windows 2003 in native mode.

Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 4 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 4 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros