Avatar of smpvm
smpvm
 asked on

AD replication error

After a small troubleshooting i came to understand that there is a replication failure happening from DC3 to DC1 and DC1 to DC3. The error message is as follows:-

The following error occurred during the attempt to synchronize naming context DomainDnsZones.contoso.com from Domain Controller DC3 to DC1. Insufficient attributes were given to create an object.This object may not exist because it may have been deleted and already garbage collected.This operation will not continue.

The current AD Infrastructure of our company consists of 3 Domain Controllers as follows:-
1)      DC01:-
      Server Name:-DC01
      Architecture:-Physical Server
      Operating System Installed: - Windows Server 2008 SP1 Standard Edition
      Server type: - 32-bit
      Antivirus Installed:- McAfee VirusScan Enterprise +Antispyware Enterprise
      Domain Functional Level:- Windows Server 2008
      Flexible Single Operations Masters (FSMO) running:-PDC Emulator and Relative Identifier (RID) Master
      Server Roles Installed:-
      DNS
      DHCP
      Global Catalog (GC)

2) DC02:-
      Server Name:-DC02
      Architecture:-Physical Server
      Operating System Installed: - Windows Server 2008 SP1 Standard Edition
      Server type: - 32-bit
      Antivirus:- McAfee VirusScan Enterprise +Antispyware Enterprise
      Domain Functional Level:- Windows Server 2008
      Flexible Single Operations Masters (FSMO) running:-Domain Naming and Schema Master
       Server Roles Installed:-
      DNS
      Global Catalog (GC)

3) DC03:-
      Server Name:-DC03
      Architecture:-Virtual Server
      Operating System Installed: - Windows Server 2008 SP1 Standard Edition
      Server type: - 32-bit
      Antivirus:- McAfee VirusScan Enterprise +Antispyware Enterprise
      Domain Functional Level:- Windows Server 2008
      Flexible Single Operations Masters (FSMO) running:-Infrastructure Master
       Server Roles Installed:-
      DNS
      Global Catalog (GC)

Please help me to solve this issue ASAP.

Thank you for the excellent support we are getting from all the "Experts" from Expert-Exchange

Regards,
Active Directory

Avatar of undefined
Last Comment
smpvm

8/22/2022 - Mon
smpvm

ASKER
Hello Experts,

For your detailed examination and troubleshooting purpose i am also attaching you the output of the command C:\>DcDiag /s:DC01   .  

Note:-for security reason i just modify my actual domain name with contoso.com



Directory Server Diagnosis


Performing initial setup:

   * Identified AD Forest.
   Done gathering initial info.


Doing initial required tests

   
   Testing server: Contoso_Network\DC01

      Starting test: Connectivity

         ......................... DC01 passed test Connectivity



Doing primary tests

   
   Testing server: Contoso_Network\DC01

      Starting test: Advertising

         ......................... DC01 passed test Advertising

      Starting test: FrsEvent

         ......................... DC01 passed test FrsEvent

      Starting test: DFSREvent

         ......................... DC01 passed test DFSREvent

      Starting test: SysVolCheck

         ......................... DC01 passed test SysVolCheck

      Starting test: KccEvent

         ......................... DC01 passed test KccEvent

      Starting test: KnowsOfRoleHolders

         ......................... DC01 passed test KnowsOfRoleHolders

      Starting test: MachineAccount

         ......................... DC01 passed test MachineAccount

      Starting test: NCSecDesc

         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=ForestDnsZones,DC=contoso,DC=com
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have

            Replicating Directory Changes In Filtered Set
         access rights for the naming context:

         DC=DomainDnsZones,DC=contoso,DC=com
         ......................... DC01 failed test NCSecDesc

      Starting test: NetLogons

         ......................... DC01 passed test NetLogons

      Starting test: ObjectsReplicated

         ......................... DC01 passed test ObjectsReplicated

      Starting test: Replications

         [Replications Check,DC01] A recent replication attempt failed:

            From DC03 to DC01

            Naming Context: DC=DomainDnsZones,DC=contoso,DC=ae

            The replication generated an error (8606):

            Insufficient attributes were given to create an object. This object may not exist because it may have been deleted and already garbage collected.

           

            The failure occurred at 2015-03-08 14:54:37.

            The last success occurred at 2014-11-05 23:50:24.

            2995 failures have occurred since the last success.

         ......................... DC01 failed test Replications

      Starting test: RidManager

         ......................... DC01 passed test RidManager

      Starting test: Services

         ......................... DC01 passed test Services

      Starting test: SystemLog

         An Error Event occurred.  EventID: 0x0000165B

            Time Generated: 03/08/2015   14:57:09

            Event String:

            The session setup from computer 'LABB3-R04-M03' failed because the security database does not contain a trust account 'LABB3-R04-M03$' referenced by the specified computer.  


         An Error Event occurred.  EventID: 0x000016AD

            Time Generated: 03/08/2015   15:00:23

            Event String:

            The session setup from the computer LABB3-R04-M03 failed to authenticate. The following error occurred:


         An Error Event occurred.  EventID: 0x0000165B

            Time Generated: 03/08/2015   15:30:34

            Event String:

            The session setup from computer 'VAN-02-P' failed because the security database does not contain a trust account 'VAN-02-P$' referenced by the specified computer.  


         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:18

            Event String:

            Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKB-GF-Photocopier SHARPM753N is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:19

            Event String:

            Driver SHARP MX-M753N PCL6 required for printer !!printserver01!Library Photocopier-SHARP is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:22

            Event String:

            Driver hp LaserJet 1320 PCL 6 required for printer !!printserver01!B1-04-HP1320 is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:24

            Event String:

            Driver CDC 1730_DCC 2730 KX required for printer !!printserver01!Library-Photocopier Colour is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:25

            Event String:

            Driver HP Color LaserJet 5550 PCL 5c required for printer !!printserver01!BLKA-ACDN-HPCOLOUR5550N is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:27

            Event String:

            Driver KONICA MINOLTA pagepro 4650 PCL required for printer !!printserver01!KONICA-PP4650EN-REGISTRATION is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:28

            Event String:

            Driver HP Color LaserJet 5550 PCL 6 required for printer !!printserver01!BLKA-REG-HPCOLOUR5550N is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:30

            Event String:

            Driver HP Universal Printing PCL 6 required for printer !!printserver01!Advancement Office-HP2015 is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:31

            Event String:

            Driver HP LaserJet P2015 Series PCL 5e required for printer !!printserver01!B1-03-HP2015 is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:33

            Event String:

            Driver SHARP MX-M354N PCL6 required for printer !!printserver01!BLKD-Photocopier SHARM354N is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:36

            Event String:

            Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKA-Photocopier SHARPM753N is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:38

            Event String:

            Driver HP Color LaserJet 5550 PCL 6 required for printer !!printserver01!BLKD-ADO-HPCOLOUR5550N is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:39

            Event String:

            Driver SHARP MX-M354N PCL6 required for printer !!printserver01!BLKB-Photocopier SHARPM354N is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:43

            Event String:

            Driver SHARP MX-5110N PCL6 required for printer !!printserver01!BLKA-Photocopier Color SHARP5110N is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:44

            Event String:

            Driver HP Universal Printing PCL 6 required for printer !!printserver01!MBA-REG-HP2015 is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:45

            Event String:

            Driver CutePDF Writer required for printer CutePDF Writer is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:43:47

            Event String:

            Driver KONICA MINOLTA pagepro 5650 PCL required for printer KONICA MINOLTA pagepro 5650 PCL is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:48:18

            Event String:

            Driver SHARP MX-M753N PCL6 required for printer !!printserver01!Library Photocopier-SHARP is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:48:20

            Event String:

            Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKB-GF-Photocopier SHARPM753N is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:48:21

            Event String:

            Driver SHARP MX-5110N PCL6 required for printer !!printserver01!BLKA-Photocopier Color SHARP5110N is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:48:22

            Event String:

            Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKA-PrintCentre-Photocopier SHARPM753N is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:48:26

            Event String:

            Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKC-GF-Photocopier SHARPM753N is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:48:28

            Event String:

            Driver SHARP MX-M753N PCL6 required for printer !!printserver01!BLKA-Photocopier SHARPM753N is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:48:29

            Event String:

            Driver CutePDF Writer required for printer CutePDF Writer is unknown. Contact the administrator to install the driver before you log in again.

         An Error Event occurred.  EventID: 0x00000457

            Time Generated: 03/08/2015   15:48:31

            Event String:

            Driver SolidPDFConverter required for printer Solid Converter PDF is unknown. Contact the administrator to install the driver before you log in again.

         ......................... DC01 failed test SystemLog

      Starting test: VerifyReferences

         ......................... DC01 passed test VerifyReferences

   
   
   Running partition tests on : ForestDnsZones

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : DomainDnsZones

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test

         CrossRefValidation

   
   Running partition tests on : Schema

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

   
   Running partition tests on : Configuration

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

   
   Running partition tests on : contoso

      Starting test: CheckSDRefDom

         ......................... contoso passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... contoso passed test CrossRefValidation

   
   Running enterprise tests on : contoso.com

      Starting test: LocatorCheck

         ......................... contoso.com  passed test LocatorCheck

      Starting test: Intersite

         ......................... contoso.com  passed test Intersite



Regards,
Peter Hutchison

Did you run DCdiag from a workstation or the server itself?

Sometimes, that the NCSecDesc errors are due to RODC (Read Only DCs) schema has not been configured and it can produce this error when DCdiag is run from workstations.
See http://support.microsoft.com/kb/967482/
smpvm

ASKER
I run the DCDiag command from the domain controller named DC01.

 
By the way i have a question, when DC01 is in 32-Bit and DC03 in 64-Bit is this will cause any problem for replication ?
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
ASKER CERTIFIED SOLUTION
Peter Hutchison

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
smpvm

ASKER
I've requested that this question be deleted for the following reason:

No good solution provided
smpvm

ASKER
No solution