How to check KCC configuration is set on Windows Server 2012 R2 and Server 2003 before decommissioning DC/GC?


Can anyone pelase assist me with how to check the KCC configuration in both version of Windows Server 2003 and 2012 R2 ?

Because the Automatic recalculation and AD Sites link conenction somehow cannot be established so I had to manually create the link from each of my 72 site offices to my newly created domain controller and if I forgot to create the link to my new DC, somehow AD replication didn't work.

This KB article: it is for configuring KCC values on Windows Server 2003

LVL 11
Senior IT System EngineerIT ProfessionalAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Senior IT System EngineerIT ProfessionalAuthor Commented:
This is the error and the event logged daily in my existing domain controller (2012 R2):

Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          2/06/2015 8:33:22 AM
Event ID:      1311
Task Category: Knowledge Consistency Checker
Level:         Error
Keywords:      Classic
User:          ANONYMOUS LOGON
The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition.
Directory partition:

There is insufficient site connectivity information for the KCC to create a spanning tree replication topology. Or, one or more directory servers with this directory partition are unable to replicate the directory partition information. This is probably due to inaccessible directory servers.
User Action
Perform one of the following actions:
- Publish sufficient site connectivity information so that the KCC can determine a route by which this directory partition can reach this site. This is the preferred option.
- Add a Connection object to a directory service that contains the directory partition in this site from a directory service that contains the same directory partition in another site.
If neither of the tasks correct this condition, see previous events logged by the KCC that identify the inaccessible directory servers.

Log Name:      Directory Service
Source:        Microsoft-Windows-ActiveDirectory_DomainService
Date:          2/06/2015 8:33:22 AM
Event ID:      1865
Task Category: Knowledge Consistency Checker
Level:         Warning
Keywords:      Classic
User:          ANONYMOUS LOGON
The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site.
Will SzymkowskiSenior Solution ArchitectCommented:
This is a common Event when you have servers in a Site that are added to Site Links where they do not have connectivity to all of the Sites within the Site Link. I have just completed a couple of articles on my site which walk through this entire process.

AD Sites and Services

Senior IT System EngineerIT ProfessionalAuthor Commented:
Thanks Will,

so how to enable the automatic KCC calculation so that I can delete those manually created ADSite Link safely ?
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Will SzymkowskiSenior Solution ArchitectCommented:
In the link that you provided did you specifically disable the KCC on any of your domain controllers?

If you have you need to first reverse those changes.

When you have network connectivity between sites this is why the KCC creates the connections required. If you do not have replication between some sites then you need to create new Site Links (part 2 of my articles) and have them replicate through a Hub site.

As i have stated that error message means that there is a site that is part of a Site Link where it does not have a physical routable connection to it. You need to create new site links and add your DC's that actually have connections to each other to the appropriate ones. I have outlined this exact step in Part 2 of my HowTo on my site.

Senior IT System EngineerIT ProfessionalAuthor Commented:
Will, is there any other way to quickly check if the KCC setting is/was disabled ?
THe LDP.exe way is for old Win2003 andhard to use.
Senior IT System EngineerIT ProfessionalAuthor Commented:
ok, as per this KB article:

1. Open Active Directory Sites and Services: On the Start menu, point to Administrative Tools, and then click Active Directory Sites and Services.
2. In the console tree, expand Sites, and then select the site for which you want to enable the KCC.
3. In the details pane, right-click the NTDS Site Settings object for the selected site, and then click Properties.
4. In NTDS Site Settings Properties, on the Attribute Editor tab, select the options attribute, and then click Edit.
the value in my new HQDC01 is <not set>

does that means it is automatic KCC is enabled ?
Will SzymkowskiSenior Solution ArchitectCommented:
There is no other way that i know of. I just tested this in my 2012 R2 lab environment and the commands are all the same it works completely fine. All you really need to do is look for is the following below Options for the specific Site you are viewing.


If these values are set, then the KCC is disabled.

However i doubt they are disabled in the first place as this is not a smart move to do as KCC should always be enabled and it is by default.

Your issue is related to how you have sites that cannot communicate in the same Site Link. That is why the KCC will not create connections automatically.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Senior IT System EngineerIT ProfessionalAuthor Commented:
Thanks !
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.