• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 741
  • Last Modified:

Strange Replication Issue with AD/Group Policy

I have a domain that has about 6 domain controllers in it, all at different locations.

One location has a server running 2003 Standard, all others are 2008.

The one running 2003, when I open group policy, all the policies are wrong and old.  So it seems that group policy is not replication to this domain controller.

I have checked the file replication logs, here is what i'm finding:
Event ID 13508
The File Replication Service is having trouble enabling replication from DCNORTH to DCMONT for c:\windows\sysvol\domain using the DNS name DCNORTH.domain.local. FRS will keep retrying.
 Following are some of the reasons you would see this warning.
 
 [1] FRS can not correctly resolve the DNS name DCNORTH.domain.local from this computer.
 [2] FRS is not running on DCNORTH.domain.local.
 [3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

Then Event ID 13509 will appear after about 6 days.

The File Replication Service has enabled replication from DCNORTH to DCMONT for c:\windows\sysvol\domain after repeated retries.


I would prefer it replicate with another server, not DCNORTH. But event 13509 indicates that replication is happening, correct?

Thank you!
0
cas_three
Asked:
cas_three
2 Solutions
 
Brad BouchardInformation Systems Security OfficerCommented:
On the 2k3 server:
IPCONFIG/FLUSHDNS, then IPCONFIG/REGISTERDNS
Restart the DNS Client, and DNS Server services
Scavenge stale resource records in DNS
Open Active Directory Sites and Services and expand all servers all the way to NTDS settings.  Right click on each and select Replicate Now
Lastly, make sure FRS is running on all DCs

Let me know the results of the above and we can go from there.
0
 
cas_threeAuthor Commented:
how long will replication take?
0
 
abhijitwaikarCommented:
Hi,

Event ID 13509 says that the replication has been resumed hence there hould not be any problem.

You may confirm the same by running DCDIAG, REPADMIN command and using FRS events.

You said the you do not want replicate with DCNORTH but with another server,  FYI, that is depend upon the AD replication topology and that is configured by KCC more efficient way and I would recommmend to change the default configuration.

Did you manually configured AD replication topology in site and services?
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
Krzysztof PytkoActive Directory EngineerCommented:
Looks like FRS replication issue. Maybe you AD database is replicating properly and there is no issue with it. Please check that running on a DC in command-line

dcdiag /e /c /v /f:c:\dcdiag.log

Open in new window


and attach it here for analyze, please.

In the meantime, perform non-authoritative restore on that 2003 Domain Controller using D2 burflag regarding to MS article at
http://support.microsoft.com/kb/840674

should solve the issue

Regards,
Krzysztof
0
 
cas_threeAuthor Commented:
Looks like it's not a replication issue after all.  I implemented GPP's on a 2008 server, this server is 2003, can't see the GPP's there. I'm such an idiot!!!!

Sorry for being dumb:)

Thank you!
0
 
Krzysztof PytkoActive Directory EngineerCommented:
If you wish to use GPP on 2003, install Client Side Extension (CSE) first and it would work
http://www.microsoft.com/en-us/download/details.aspx?id=6955

Krzysztof
0
 
cas_threeAuthor Commented:
I know, just emailed my client about it.  I completely overlooked that I was using gpp's.l
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now