Link to home
Start Free TrialLog in
Avatar of kerry_dsouza
kerry_dsouza

asked on

Active Directory replication not working on Windows 2008 R2

Hi Guys,

Today I encountered an issue with one of my DC's which is on W2K8 R2 and that it was not sending out outbound AD replication messages to other DC's
I did a test sitting on the problem DC and updated a user's adress field in active directory and it did not make it to my other DC's.
But when i make a change sitting on one of my other R2 DC's on the same user account it makes it through the problem Domain contoller, so I guess INBOUND changes are working fine but not outbound for some reason.

The DCDIAG sitting on the problem DC

DCDIAG /S:L14DCGC401 /V
============================

Directory Server Diagnosis


Performing initial setup:

   * Connecting to directory service on server l14dcgc401.

   * Identified AD Forest.
   Collecting AD specific global data
   * Collecting site info.

   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
   The previous call succeeded
   Iterating through the sites
   Looking at base site object: CN=NTDS Site Settings,CN=NA-Houston,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L17,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L26,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L15,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=ME-Dubai,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L13,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L06,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=PRN,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L29,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L08,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=ME-Balad,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L25,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L09,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L10,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L43,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L33,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L32,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=NA-Erewhon,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L01,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L14,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=UK-London,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L20,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L22,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   Looking at base site object: CN=NTDS Site Settings,CN=L03,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   Getting ISTG and options for the site
   * Identifying all servers.

   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
   The previous call succeeded....
   The previous call succeeded
   Iterating through the list of servers
   Getting information for the server CN=NTDS Settings,CN=HOUFSMO400,CN=Servers,CN=NA-Houston,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L15DCGC400,CN=Servers,CN=L15,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L17DCGC400,CN=Servers,CN=L17,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L13DCGC400,CN=Servers,CN=L13,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L06DCGC400,CN=Servers,CN=L06,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=PRNDCGC400,CN=Servers,CN=PRN,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L25DCGC400,CN=Servers,CN=L25,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L09DCGC400,CN=Servers,CN=L09,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L10DCGC400,CN=Servers,CN=L10,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L43DCGC400,CN=Servers,CN=L43,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L33DCGC400,CN=Servers,CN=L33,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L32DCGC400,CN=Servers,CN=L32,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L01DCGC401,CN=Servers,CN=L01,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L20DCGC401,CN=Servers,CN=L20,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L22DCGC400,CN=Servers,CN=L22,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L03DCGC400,CN=Servers,CN=L03,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L14DCGC401,CN=Servers,CN=L14,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=BLDDCGC400,CN=Servers,CN=ME-Balad,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=DXBDCGC401,CN=Servers,CN=ME-Dubai,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=HOUFSMO400TEMP,CN=Servers,CN=NA-Houston,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=LONDCGC400,CN=Servers,CN=UK-London,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=L29DCGC401,CN=Servers,CN=L29,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   * Identifying all NC cross-refs.

   * Found 22 DC(s). Testing 1 of them.

   Done gathering initial info.


Doing initial required tests

   
   Testing server: L14\L14DCGC401

      Starting test: Connectivity

         * Active Directory LDAP Services Check
         Determining IP4 connectivity
         Determining IP6 connectivity
         * Active Directory RPC Services Check
         ......................... L14DCGC401 passed test Connectivity



Doing primary tests

   
   Testing server: L14\L14DCGC401

      Starting test: Advertising

         The DC L14DCGC401 is advertising itself as a DC and having a DS.
         The DC L14DCGC401 is advertising as an LDAP server
         The DC L14DCGC401 is advertising as having a writeable directory
         The DC L14DCGC401 is advertising as a Key Distribution Center
         The DC L14DCGC401 is advertising as a time server
         The DS L14DCGC401 is advertising as a GC.
         ......................... L14DCGC401 passed test Advertising

      Test omitted by user request: CheckSecurityError

      Test omitted by user request: CutoffServers

      Starting test: FrsEvent

         * The File Replication Service Event log test
         ......................... L14DCGC401 passed test FrsEvent

      Starting test: DFSREvent

         The DFS Replication Event Log.
         ......................... L14DCGC401 passed test DFSREvent

      Starting test: SysVolCheck

         * The File Replication Service SYSVOL ready test
         File Replication Service's SYSVOL is ready
         ......................... L14DCGC401 passed test SysVolCheck

      Starting test: KccEvent

         * The KCC Event log test
         Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
         ......................... L14DCGC401 passed test KccEvent

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=HOUFSMO400,CN=Servers,CN=NA-Houston,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
         Role Domain Owner = CN=NTDS Settings,CN=HOUFSMO400,CN=Servers,CN=NA-Houston,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
         Role PDC Owner = CN=NTDS Settings,CN=HOUFSMO400,CN=Servers,CN=NA-Houston,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
         Role Rid Owner = CN=NTDS Settings,CN=HOUFSMO400,CN=Servers,CN=NA-Houston,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
         Role Infrastructure Update Owner = CN=NTDS Settings,CN=HOUFSMO400,CN=Servers,CN=NA-Houston,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
         ......................... L14DCGC401 passed test KnowsOfRoleHolders

      Starting test: MachineAccount

         Checking machine account for DC L14DCGC401 on DC L14DCGC401.
         * SPN found :LDAP/L14DCGC401.kbrsat.kbr.com/kbrsat.kbr.com
         * SPN found :LDAP/L14DCGC401.kbrsat.kbr.com
         * SPN found :LDAP/L14DCGC401
         * SPN found :LDAP/L14DCGC401.kbrsat.kbr.com/KBRSAT
         * SPN found :LDAP/76e8db8f-8264-4a81-afb7-929f31a7b30f._msdcs.kbrsat.kbr.com
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/76e8db8f-8264-4a81-afb7-929f31a7b30f/kbrsat.kbr.com
         * SPN found :HOST/L14DCGC401.kbrsat.kbr.com/kbrsat.kbr.com
         * SPN found :HOST/L14DCGC401.kbrsat.kbr.com
         * SPN found :HOST/L14DCGC401
         * SPN found :HOST/L14DCGC401.kbrsat.kbr.com/KBRSAT
         * SPN found :GC/L14DCGC401.kbrsat.kbr.com/kbrsat.kbr.com
         ......................... L14DCGC401 passed test MachineAccount

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC L14DCGC401.
         The forest is not ready for RODC. Will skip checking ERODC ACEs.
         * Security Permissions Check for

           DC=ForestDnsZones,DC=kbrsat,DC=kbr,DC=com
            (NDNC,Version 3)
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=ForestDnsZones,DC=kbrsat,DC=kbr,DC=com
         * Security Permissions Check for

           DC=DomainDnsZones,DC=kbrsat,DC=kbr,DC=com
            (NDNC,Version 3)
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=DomainDnsZones,DC=kbrsat,DC=kbr,DC=com
         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
            (Schema,Version 3)
         * Security Permissions Check for

           CN=Configuration,DC=kbrsat,DC=kbr,DC=com
            (Configuration,Version 3)
         * Security Permissions Check for

           DC=kbrsat,DC=kbr,DC=com
            (Domain,Version 3)
         ......................... L14DCGC401 failed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check
         Verified share \\L14DCGC401\netlogon
         Verified share \\L14DCGC401\sysvol
         ......................... L14DCGC401 passed test NetLogons

      Starting test: ObjectsReplicated

         L14DCGC401 is in domain DC=kbrsat,DC=kbr,DC=com
         Checking for CN=L14DCGC401,OU=Domain Controllers,DC=kbrsat,DC=kbr,DC=com in domain DC=kbrsat,DC=kbr,DC=com on 1 servers
            Object is up-to-date on all servers.
         Checking for CN=NTDS Settings,CN=L14DCGC401,CN=Servers,CN=L14,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com in domain CN=Configuration,DC=kbrsat,DC=kbr,DC=com on 1 servers
            Object is up-to-date on all servers.
         ......................... L14DCGC401 passed test ObjectsReplicated

      Test omitted by user request: OutboundSecureChannels

      Starting test: Replications

         * Replications Check
         * Replication Latency Check
            DC=ForestDnsZones,DC=kbrsat,DC=kbr,DC=com
               Latency information for 61 entries in the vector were ignored.
                  61 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
            DC=DomainDnsZones,DC=kbrsat,DC=kbr,DC=com
               Latency information for 61 entries in the vector were ignored.
                  61 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
            CN=Schema,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
               Latency information for 99 entries in the vector were ignored.
                  99 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
            CN=Configuration,DC=kbrsat,DC=kbr,DC=com
               Latency information for 99 entries in the vector were ignored.
                  99 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
            DC=kbrsat,DC=kbr,DC=com
               Latency information for 90 entries in the vector were ignored.
                  90 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC).  
         ......................... L14DCGC401 passed test Replications

      Starting test: RidManager

         * Available RID Pool for the Domain is 272100 to 1073741823
         * houfsmo400.kbrsat.kbr.com is the RID Master
         * DsBind with RID Master was successful
         * rIDAllocationPool is 242600 to 243099
         * rIDPreviousAllocationPool is 242600 to 243099
         * rIDNextRID: 242606
         ......................... L14DCGC401 passed test RidManager

      Starting test: Services

         * Checking Service: EventSystem
         * Checking Service: RpcSs
         * Checking Service: NTDS
         * Checking Service: DnsCache
         * Checking Service: NtFrs
         * Checking Service: IsmServ
         * Checking Service: kdc
         * Checking Service: SamSs
         * Checking Service: LanmanServer
         * Checking Service: LanmanWorkstation
         * Checking Service: w32time
         * Checking Service: NETLOGON
         ......................... L14DCGC401 passed test Services

      Starting test: SystemLog

         * The System Event log test
         An Error Event occurred.  EventID: 0xC000271A

            Time Generated: 04/03/2011   15:17:08

            Event String:

            The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.

         An Warning Event occurred.  EventID: 0x80000008

            Time Generated: 04/03/2011   15:17:09

            Event String:

            The jobs in the print queue for printer Fax (redirected 2) were deleted. No user action is required.

            To stop logging warning events for the print spooler, in Control Panel, open Printers, right-click a blank area of the window, click Run as Administrator, click Server Properties, click the Advanced tab, and then clear the Log spooler warning events check box.

         An Warning Event occurred.  EventID: 0x80000004

            Time Generated: 04/03/2011   15:17:09

            Event String:

            Printer Fax (redirected 2) will be deleted. No user action is required.

            To stop logging warning events for the print spooler, in Control Panel, open Printers, right-click a blank area of the window, click Run as Administrator, click Server Properties, click the Advanced tab, and then clear the Log spooler warning events check box.

         An Warning Event occurred.  EventID: 0x80000003

            Time Generated: 04/03/2011   15:17:10

            Event String:

            Printer Fax (redirected 2) was deleted, and users will no longer be able to print to this printer. No user action is required.

            To stop logging information events for the print spooler, in Control Panel, open Printers, right-click a blank area of the window, click Run as Administrator, click Server Properties, click the Advanced tab, and then clear the Log spooler information events check box.

         An Warning Event occurred.  EventID: 0x80000008

            Time Generated: 04/03/2011   15:17:10

            Event String:

            The jobs in the print queue for printer Microsoft XPS Document Writer (redirected 2) were deleted. No user action is required.

            To stop logging warning events for the print spooler, in Control Panel, open Printers, right-click a blank area of the window, click Run as Administrator, click Server Properties, click the Advanced tab, and then clear the Log spooler warning events check box.

         An Warning Event occurred.  EventID: 0x80000004

            Time Generated: 04/03/2011   15:17:10

            Event String:

            Printer Microsoft XPS Document Writer (redirected 2) will be deleted. No user action is required.

            To stop logging warning events for the print spooler, in Control Panel, open Printers, right-click a blank area of the window, click Run as Administrator, click Server Properties, click the Advanced tab, and then clear the Log spooler warning events check box.

         An Warning Event occurred.  EventID: 0x80000003

            Time Generated: 04/03/2011   15:17:10

            Event String:

            Printer Microsoft XPS Document Writer (redirected 2) was deleted, and users will no longer be able to print to this printer. No user action is required.

            To stop logging information events for the print spooler, in Control Panel, open Printers, right-click a blank area of the window, click Run as Administrator, click Server Properties, click the Advanced tab, and then clear the Log spooler information events check box.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 04/03/2011   15:22:49

            Event String:

            Driver HP Universal Printing PCL 6 required for printer !!dxbinfr301!DXB0043 is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 04/03/2011   15:22:50

            Event String:

            Driver Adobe PDF Converter required for printer Adobe PDF is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 04/03/2011   15:22:52

            Event String:

            Driver Amyuni Document Converter 2.50 required for printer Final Draft PDF Converter 2 is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 04/03/2011   15:22:53

            Event String:

            Driver Microsoft Office Document Image Writer Driver required for printer Microsoft Office Document Image Writer is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 04/03/2011   15:22:54

            Event String:

            Driver Microsoft Office Live Meeting 2007 Document Writer Driver required for printer Microsoft Office Live Meeting 2007 Document Writer is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 04/03/2011   15:22:56

            Event String:

            Driver Vbuzzer Fax Printer Driver required for printer Vbuzzer Fax Printer is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 04/03/2011   15:22:57

            Event String:

            Driver Xerox WorkCentre 5675 required for printer !!dxbinfr301!DXB0013 is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 04/03/2011   15:22:58

            Event String:

            Driver Xerox WorkCentre 5675 PCL6 required for printer !!dxbinfr300!DXB0036 is unknown. Contact the administrator to install the driver before you log in again.

         ......................... L14DCGC401 failed test SystemLog

      Test omitted by user request: Topology

      Test omitted by user request: VerifyEnterpriseReferences

      Starting test: VerifyReferences

         The system object reference (serverReference)

         CN=L14DCGC401,OU=Domain Controllers,DC=kbrsat,DC=kbr,DC=com and

         backlink on

         CN=L14DCGC401,CN=Servers,CN=L14,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com

         are correct.
         The system object reference (serverReferenceBL)

         CN=L14DCGC401,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=kbrsat,DC=kbr,DC=com

         and backlink on

         CN=NTDS Settings,CN=L14DCGC401,CN=Servers,CN=L14,CN=Sites,CN=Configuration,DC=kbrsat,DC=kbr,DC=com

         are correct.
         ......................... L14DCGC401 passed test VerifyReferences

      Test omitted by user request: VerifyReplicas

   
      Test omitted by user request: DNS

      Test omitted by user request: DNS

   
   Running partition tests on : ForestDnsZones

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : DomainDnsZones

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : Schema

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

   
   Running partition tests on : Configuration

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

   
   Running partition tests on : kbrsat

      Starting test: CheckSDRefDom

         ......................... kbrsat passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... kbrsat passed test CrossRefValidation

   
   Running enterprise tests on : kbrsat.kbr.com

      Test omitted by user request: DNS

      Test omitted by user request: DNS

      Starting test: LocatorCheck

         GC Name: \\L14DCGC401.kbrsat.kbr.com

         Locator Flags: 0xe00011fc
         PDC Name: \\houfsmo400.kbrsat.kbr.com
         Locator Flags: 0xe000017d
         Time Server Name: \\L14DCGC401.kbrsat.kbr.com
         Locator Flags: 0xe00011fc
         Preferred Time Server Name: \\L14DCGC401.kbrsat.kbr.com
         Locator Flags: 0xe00011fc
         KDC Name: \\L14DCGC401.kbrsat.kbr.com
         Locator Flags: 0xe00011fc
         ......................... kbrsat.kbr.com passed test LocatorCheck

      Starting test: Intersite

         Skipping site NA-Houston, this site is outside the scope provided by

         the command line arguments provided.
         Skipping site L17, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L26, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L15, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site ME-Dubai, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L13, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L06, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site PRN, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L29, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L08, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site ME-Balad, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L25, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L09, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L10, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L43, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L33, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L32, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site NA-Erewhon, this site is outside the scope provided by

         the command line arguments provided.
         Skipping site L01, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L14, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site UK-London, this site is outside the scope provided by

         the command line arguments provided.
         Skipping site L20, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L22, this site is outside the scope provided by the

         command line arguments provided.
         Skipping site L03, this site is outside the scope provided by the

         command line arguments provided.
         ......................... kbrsat.kbr.com passed test Intersite


Any ideas guys? why the outbound replication is not working?

Avatar of needleboy
needleboy
Flag of Serbia image

Can you describe your AD topology and site links?
Did you make any changes to topology or site links?
one of the error in your dcdiag report could come from this : http://support.microsoft.com/kb/967482
the other (Latency information for 61 entries in the vector were ignored)
could you check:
- is your DC time synched with others?
- run repadmin /showrepl on one healthy and your current non-working DC
- is this a virtual server?
Avatar of kerry_dsouza
kerry_dsouza

ASKER

The /showrepl command on the problem DC looks like this
====================================

Repadmin: running command /showrepl against full DC localhost
L14\L14DCGC401
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: 76e8db8f-8264-4a81-afb7-929f31a7b30f
DSA invocationID: e4edadc4-9bc7-4b3c-8cad-f99ba17d607b

==== INBOUND NEIGHBORS ======================================

DC=kbrsat,DC=kbr,DC=com
    UK-London\LONDCGC400 via RPC
        DSA object GUID: e105c4f8-19cd-4d27-9425-b9a2614f5c6d
        Last attempt @ 2011-04-04 06:00:45 was successful.

CN=Configuration,DC=kbrsat,DC=kbr,DC=com
    UK-London\LONDCGC400 via RPC
        DSA object GUID: e105c4f8-19cd-4d27-9425-b9a2614f5c6d
        Last attempt @ 2011-04-04 06:00:46 was successful.

CN=Schema,CN=Configuration,DC=kbrsat,DC=kbr,DC=com
    UK-London\LONDCGC400 via RPC
        DSA object GUID: e105c4f8-19cd-4d27-9425-b9a2614f5c6d
        Last attempt @ 2011-04-04 06:00:47 was successful.

DC=DomainDnsZones,DC=kbrsat,DC=kbr,DC=com
    UK-London\LONDCGC400 via RPC
        DSA object GUID: e105c4f8-19cd-4d27-9425-b9a2614f5c6d
        Last attempt @ 2011-04-04 06:00:47 was successful.

DC=ForestDnsZones,DC=kbrsat,DC=kbr,DC=com
    UK-London\LONDCGC400 via RPC
        DSA object GUID: e105c4f8-19cd-4d27-9425-b9a2614f5c6d
        Last attempt @ 2011-04-04 06:00:48 was successful.
=======================================================

The server is in a different country so that Time Zone is according to that city but its is correct, and its not a virtual server.




I would  use the replmon tool.  it gives you a gui view of your replication topology.

I would add the domain controllers and then look at the naming contexts and look at the USN'S. Also, you can test replication to see if you get any errors.

if you are seeing updates on the other domain controllers then its possible that your domain naming context is not replicating properly. replmon will allow you see this in the gui and in detail.
@Activediretcoryman

Hi --> Good that I have soem W2K3 DC's so I can use replmon coz I think we cant use one on W2K8 R2 right?
Anyways I added the problem DC (L14DCGC401) and our main replication partner in London (LONDCGC) and while looking at the first partition I see the USN number's are not synced I can test replication just fine it says "The last replication attempt was succesfull" but the USN are off

L14 USN ---20028266
L14USN on LONDCGC --> 8955904

What do u recommend I do?


Do you have a single site or mutiple active directory sites?

try this command  repadmin /syncall  

try this on the dc where you made the change.

for example?

repadmin /syncall server1.yourdomain.com  dc=yourdomain,dc=com

this will sync the domain directory partition between the domain controllers.  it appears that replication is fine but that you have different active directory sites.   if you have different active directory sites replication happens at a interval that you set in active directory sites and services.
@ADMAN

Yes, I do have multiple sites since the servers are located in different cities.
So you remommend I run the repadmin /syncall command on the DC which is behing on USN's which in this case is L14DCGC401?

Also the replication interval is set to 15 minutes in AD which is the number we have on all our sites.
You talk about making a change, but I havent made any chance to this DC.

and will this command coz any outage or loss of service?




Ok. ignore my repadmin post.  Can you check the  FRS, and the Directory Service event viewer logs on the problem domain controller and let me know if you see any errors.  If there are replication issues they would show up in the event viewer majority of the time.
SOLUTION
Avatar of kerry_dsouza
kerry_dsouza

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial


is the problem domain controller in the same active directory site as the domain controllers that received the updated attribute? or are they in different sites? Are the working domain controllers in the same site as the problem dc ?




The DC which is not sending out repliaction messages is in a seperate AD site to all the other DC's.
Most of our DC's are in a seperate site because of the geographic location they are at...
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
The server rebooted and it started the replication process.
I havent done any change or modification so dont really know what caused this
Sounds like a fakey cable to me...