Avatar of Syed Sohail
Syed Sohail
Flag for Australia asked on

The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition.

Receiving alerts from SCCM tht KCC has detected problems with directory partition, ran repadmin /replsummary and found error 8456 (screenshot attached)
Ran dcdiag and found multiple error on KCC Event (screenshot attached). I would appreciate your assistance on how to resolve this issue.
* Active Directory ReplicationActive Directory

Avatar of undefined
Last Comment
Michael Pfister

8/22/2022 - Mon
Michael Pfister

Please run
dcdiag /e /v > dcdiag.txt

Open in new window

and attach the resulting log file (remove company information first from the text file).

First check Active Directory Sites and Services, verify all the subnets in your domain are configured and site links exist between each site. .
Syed Sohail

Thanks for your response Michael, I have checked that all subnets in domain are configured in site links exists between sites. Please find attched the output of dcdiag command                     dcdiag dcdiag output.rtf
Michael Pfister

This is what I've found:

      Test omitted by user request: OutboundSecureChannels

      Starting test: Replications

         * Replications Check
         [Replications Check,Replications Check] Inbound replication is


         To correct, run "repadmin /options XXXXSHAREDDC01


         [Replications Check,XXXXSHAREDDC01] Outbound replication is disabled.

         To correct, run "repadmin /options XXXXSHAREDDC01


         ......................... XXXXSHAREDDC01 failed test Replications

Open in new window

Not sure how this happened. Have a look at this server.
Check eventlog and run
dcdiag /v > XXXXSHAREDDC01.txt 

Open in new window

I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
Syed Sohail

Hi, I ran the command "repadmin /options XXXXSHAREDDC01 -DISABLE_INBOUND_REPL", and
"repadmin /options XXXXSHAREDDC01 -DISABLE_OUTBOUND_REPL", this generated event ID 1114 and 1116 stating Inbout and Outbound replication started by the user.

But just after that event 2095
"During an Active Directory Domain Services replication request, the local domain controller (DC) identified a remote DC which has received replication data from the local DC using already-acknowledged USN tracking numbers.
 Because the remote DC believes it is has a more up-to-date Active Directory Domain Services database than the local DC, the remote DC will not apply future changes to its copy of the Active Directory Domain Services database or replicate them to its direct and transitive replication partners that originate from this local DC."

Followed by 1113 and 1115, "Inbound and Outbound replication has been disabled by the user"
Michael Pfister

View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.