Solved

Active Directory 2003 High Replication

Posted on 2014-01-02
6
233 Views
Last Modified: 2014-02-05
Hello experts,

We have a domain reporting very high replication traffic. Do you have any suggestions on what tool/s I could use to determine where or what source it is coming from?

Thank you!
0
Comment
Question by:syseng007
6 Comments
 

Author Comment

by:syseng007
ID: 39752325
..
0
 
LVL 19

Expert Comment

by:helpfinder
ID: 39752345
0
 

Author Comment

by:syseng007
ID: 39752382
I actually meant what application is triggering the high replication.......thanks again.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 39753208
If this is AD replication traffic, you may run in command-line on your DC this command

repadmin /replsummary

Open in new window


and you will see how much time the replication took and how many objects were replicated

Regards,
Krzysztof
0
 
LVL 24

Accepted Solution

by:
Sandeshdubey earned 500 total points
ID: 39755702
High bandwidth utilization between DCs
http://www.frickelsoft.net/blog/?p=185

You can use Netmon or Wireshark to capture the traffic & analyze the packet from where they are coming.

Check the zone type and change to Forestdnszone or domain dns zone if it set to All domain controllers in this domain (for Windows 2000 compatibility) :http://technet.microsoft.com/en-us/library/%20cc730964

Also verify the health of dcs by dcdiag /q and repadmin /replsum and post the log if error is reported.
0
 
LVL 36

Expert Comment

by:Mahesh
ID: 39757246
AD replication and application replication are two different terms
Because most of the applications use AD for authentication and few applications like MS Exchange adds attributes with values in AD that's get replicated across.
Are you talking about authentication traffic getting increased by AD integrated applications \ native AD authentication by users \ computers ?
If any application is storing data in AD application directory partitions, it can cause trigger replication, but I don't think it can create Hugh replication traffic because basic purpose of AD application directory partitions is to limit the replication traffic exposing to all DCs and its most probably static contents hopefully.
http://technet.microsoft.com/en-us/library/cc784421(v=ws.10).aspx

How big is you AD environment in terms of users \ computers \ and how frequently  you change active directory objects by any AD integrated applications ?
Also what is the replication interval between all sites and what is the minimum bandwidth between sites?

You can also capture traffic form individual applications to AD with netmon, wireshark etc as suggest by Sandesh above

At a minimum, since you have 2003 active directory,
You need to raise your domain and forest functional level to windows 2003 to enable Linked Value replication (LVR), a technology established with 2003 AD to replicate incremental changes only as opposed to full replication occurring in windows 2000 domain

Increasing the forest functional level to Windows Server 2003 interim or higher does not modify the way that existing group members are stored or replicated. To do that, you must remove the members that were added to the group before the forest functional level was increased to Windows Server 2003 and then add them back again to the appropriate groups. Any group members that you either add or remove after the forest functional level is increased will be LVR enabled, even if the group contains other members that are not LVR enabled

Check below section in MS article for more information
Recommended Maximum Number of Users in a Group

Mahesh
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question