What issues can I ran into if for a couple of months one of my Windows 2008 R2 domain controllers cannot communicate with a domain controller on another site

I have the following question for this scenario.
*I have around 60 AD sites worldwide and I have deployed one more site in a company that was recently acquired by my employeer. We need this domain controller on the new site while we integrate this acquired company to our Software and Domain infrastructure.
*The acquired site is configure to connect  to acquiring company headquarters only and there is a firewall in between the two sites. *Firewall has been configured to allow any to any communications between the new DC and all existing domain controller.
*New AD Site has been configured to replicate with headquarters site
* The new site can communicate with 99% of domain controllers except for the DC  in a European site that contains conflicting IP ranges therefore communication has been blocked by the network team.
*Repadmin /syncall works with no errors. However repadmin /replsummary returns error 58 in regards to that European site.
Based on above data my question is: Is it okay to run the domain controller with this limitation for a couple of months while the IP conflict situation is solved and all AD in all sites can openly communicate with the new DC? What issues could I be facing if I operate the DC in this conditions?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
I have recently just answered a similar question. Not all DC's need to be able to communicate directly with each other. How do you have your AD Site Links configured?

Do you have all of your sites part of the Default Site Link? If this is true then what you need to do is create another AD Site Link and add the machine that can communicate with each other to this AD Site Link.

You do this when specific sites cannot communicate with each other and it uses other DC's to get updates from the DC this is not reachable from the 1 site. This is called a HUB site.

Once you have done this then you should not get any more errors. If you leave the 2 sites that cannot communicate in the same AD Default Site Link then you will always see errors because it thinks that you need connections between them.

So creating additional Site Links resolves this issue.

Also make sure that you are allowing the KCC (knowledge consistency checker) to make the connections. They should be automatic.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
doloresmjAuthor Commented:
Hello Will,

Thank you for your notes, We have a hub spoke configuration. As a result  a created a site link that has as  members the new AD site and headquarters AD site. These two sites can communicate with no issues therefore inter-site replication is working properly. In addition KCC selected one of the DC in Headquarters AD site to replication with the new DC so that aspect is working properly.  Issuing command repadmin /syncall  works with no errors.

The only time I see an error is when issuing command:
dcdiag /v /e /test:advertising
repadmin /replsummary

However based on your reply seems that I should be fine as long as I can replicate with other domain controllers in a site that is reachable to the new AD site  I should be fine.
best regards,
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.