DC Replication between Sites

I ran DC Diag and have errors.  We started with one central office.  Over time with several branches, I created sites, and place backup DC's in those offices.  

Here is the error.

None of the directory servers in the following site that replicate the
following directory partition are configured to use the following transport,
even though the site itself is configured to allow replication over this transport.

 An error event occurred.  EventID: 0xC0000620
    Time Generated: 01/13/2018   12:19:02
    Event String:

I have looked at Sites and Services.  I have looked at all the NTDS of all the DC's and they show the transport is IP.

I forced Replication between the DC's the to the box that holds FSMO.  I get the same error.

My servers are Server 2012 R2.
zotfarmsAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MaheshArchitectCommented:
You have an SMTP site link u need to reconfigure the sites to use an IP link. To do this you need to delete the siteLink object under Inter-Site Transports\ SMTP and create an appropriate siteLink under Inter-Site Transports\ IP.
also need to update connection objects
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
zotfarmsAuthor Commented:
I have deleted the SMTP Link Object.  There is already the DefaultIPSitelink under IP.  Should I remove the Default IP Sitelink and recreate?
As far as updating connection objects, I drill down to Site>servers><server name> right click and add IP to "This server is a preferred bridgehed server for the following transports?  Or do I go down to the NTDS?  NTDS already shows IP.
0
MaheshArchitectCommented:
No need to delete default IP site link

also no need to manually specify bridge head server

check under connection object if any object pointing to SMTP transport, delete that object
0
zotfarmsAuthor Commented:
The error has changed.  The error on the FSMO Holder is:

      Starting test: SystemLog
         A warning event occurred.  EventID: 0x00009016
            Time Generated: 01/13/2018   12:56:29
            Event String:
            No suitable default server credential exists on this system. This will prevent server applications that expect to make use of the system default credentials from accepting SSL connections.
 An example of such an application is the directory server. Applications that manage their own credentials, such as the internet information server, are not affected by this.
         A warning event occurred.  EventID: 0x00009016
            Time Generated: 01/13/2018   12:56:29
            Event String:
0
zotfarmsAuthor Commented:
Found this in an article:

If this event is logged on a Domain Controller, you need a domain controller certificate.

In case you are not using Certificate services in your environment, it was normal to have this warning. so if you do not want a certificate, feel free to ignore it.

In case you are using Certificate services, ensure that either the Subject Name of SAN(Subject Alternate Name) must include FQDN of the server.

So, I think my issue is solved.  

Thanks.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.