Two Domain Controllers - suspect possible USN rollback but not sure

Posted on 2012-09-20
Last Modified: 2012-09-23
My question is I'm not sure if this might be a USN rollback issue.  Should the DC1 and DC2 have the same USN numbers?  I could be way off, but thought they are suppose to match.  This is only one site with two DC's both in the same domain.  There are no replication errors, but we are having issues where some people are not able to login to resources, while others can....

repadmin /showutdvec DC1 dc=domain,dc=local
Caching GUIDs.
Default-First-Site-Name\DC1          @ USN   2289458 @ Time 2012-09-20 17:31:28
Default-First-Site-Name\DC2          @ USN   4392190 @ Time 2012-09-20 17:31:23
Question by:Nathan Kaufman
    1 Comment
    LVL 4

    Accepted Solution

    It is very unlikely (and not required at all) that DC1 and DC2 will have the same USN numbers. Instead, the DCs should know about each other's USNs, and this can be checked with the repadmin /showutdvec command.

    To check for USN issues, run the command for each DC, i.e.
    repadmin /showutdvec DC1 dc=domain,dc=local
    and then
    repadmin /showutdvec DC2 dc=domain,dc=local
    The reported USNs of both outputs should be the same for each DC (or at least very close to each other, depending on no. of changes and replication interval).

    repadmin /showutdvec dc1 dc=domain,dc=local
    Caching GUIDs.
    DC2                        @ USN   7339372 @ Time 2012-09-21 10:05:36
    DC1                        @ USN  22860030 @ Time 2012-09-21 10:05:42
    repadmin /showutdvec dc2 dc=domain,dc=local
    Caching GUIDs.
    DC2                        @ USN   7339379 @ Time 2012-09-21 10:05:46
    DC1                        @ USN  22860029 @ Time 2012-09-21 10:05:39

    Open in new window

    However, to check for replication issues it is much easier to use the repadmin /showrepl and repadmin /replsum command on each of the DCs.

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    Join & Write a Comment

    by Nathan Brom/Bromy2004 Introduction There are numerous websites out there for any different type of program you can imagine.  Of those, you'll need to decide which ones are legitimate and aren't trying to steal your money or infect your comput…
    Log files are useful in diagnosing and repairing problems.  This is a list of common log files and their standard locations that I've compiled.   While this is not exhaustive, it is a pretty good list that I've found to be useful.  I may update it f…
    In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now