Avatar of nfinorthit
nfinorthit
Flag for United States of America asked on

Active directory not replicating

Server 2008r2. After power failure we noticed that dns zone won't load on the server holding FSMO role. DNS error logs indicated Event IDs 4521, 4004 and 4015 which all pointed to error replicating AD. The AD errors on the other hand have Event ID errors 2108, 448, 447, 1084. This causes ad objects not replicate changes across all other DCs, etc. How do we fix this? Thanks.
Active DirectoryDNSMicrosoft Server OS

Avatar of undefined
Last Comment
Amit

8/22/2022 - Mon
Neadom Tucker

So this is typically due to a corrupt or dirty shutdown.  Your DFRS event logs should tell you something about this and have you run a command in an elevated command to start the replication again.  What domain functional level are you running at?

If your at 2008R2 take a look at this:
http://blogs.technet.com/b/thbouche/archive/2013/08/28/dfsr-sysvol-authoritative-non-authoritative-restore-powershell-functions.aspx

Also look in your DFSR event logs as well.  They should give you a clue or post them here.
nfinorthit

ASKER
I believe functional level is 2003, although all our servers are 2008. We are not looking to raise level as it obviously wasn't the cause of this mess. We need to know what exactly do we need to do to remedy this. DFSR logs don't have any entries past the power failure; messages before the failure are strictly information, - no warnings et.al. It was recommended that we move FSMO role to another functioning DC, demote problem DC and then promote it back to DC. Is this something that can be done?
Amit

Call MS, before you try any other step. Error indicates AD corruption issue. Rebuilding could be the last option. Check this:
http://eniackb.blogspot.in/2009/06/active-directory-database.html
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
nfinorthit

ASKER
It was suggested to move FSMO role to another DC, then demote and re-promote this server. Will this work? While demoting/promoting the server, will users have access to files that are stored on the server in a separate partition? (except reboot time, of course)
ASKER CERTIFIED SOLUTION
Amit

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
nfinorthit

ASKER
Yes, we do have a backup. What I meant is this. If I demote server, then it becomes just a standalone server. Will shares on it remain share/ntfs permissions and allow users to access the files during the process, except when I am rebooting the server?
Amit

Such changes should be done during non-production hours. So, there are no user impact.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.