asked on

active directory password synchronization slow

hello Experts
recently i found a problem in our Active Directory environment:
once user change password, it take 1 or 2 hours synchronize to all DC, this cause user account to be locked, could you help me on this to know what the problem is?
current i can sure this is not network issue.

thank you

Patrick Bogers

Hi,

Where are your DC's located, all in 1 office or scattered through different sites?
First test to conduct is opening a command prompt and enter

repadmin /showrepl

beardog1113

ASKER

hello
yes DC's located in different sites.
for this command, i promote it on several DC, all result is successful and time and date is around 10 mins ago.

thanks

Patrick Bogers

If it is in different sites you need to check the site-config in snapshot Active Directories Sites and Services. Here you should be able to reduce replacation latency. (make it quicker)

HTH

beardog1113

ASKER

hello
i forget provide a scene, if i via admin account change a user account password, it could being replicate to all DC's, will take around 10 min.
but if user change password on their computer, it take almost sometimes 2 hours to all DC's, that is strange.

for Active Directory sites and services you mentioned, could you let me know how to reduce replication latency?

thanks

ASKER CERTIFIED SOLUTION