Windows Server 2008 DC not replicated properly

已答覆 Windows Server 2008 DC not replicated properly

  • 2012年6月20日 16:53
     
     

    Hi All

    This is my first post on Technet. 

    Our domain controller is not migrated properly & the old server got formatted accidentally.

    Now the issue is:

    I have to update the Group Policy in the Network but i am not able to edit the Group Policy.

    is there anyway to rectify it.

    Sorry for my poor english

    Thanks & Regards.,

    D. Ganesh Kumar

全部回复

  • 2012年6月20日 17:46
     
     已答复

    If DCs are not migrated properly and if the FSMO  holder DC is down, first step would be to seize the FSMO roles on to the existing DC and then configure the DNS properly.

    Event viewer on DC would give you an idea about errors and warning.

    Little more info like OS Versions, Number of DCs you have, Error messages etc... and the steps you have already tried would help in providing the further suggestions, can you be little more descriptive please ?



    Don't be a prick ! Be reasonable and provide your feedback. Say something whether the suggestion was helpful or not, mark a reply as answer or click on to vote helpful if any suggestion really helps you, don't leave that choice to moderators, let the credit go to a contributor who has invested his precious time on your questions. Please be informed that, moderators are also humans and they also make mistakes ;-) Last but not the least, Unmark as answer if any post doesn't answer your question/s !!!


  • 2012年6月20日 19:33
     
     已答复

    Hello Ganesh, 

    As above said seizing of FSMO roles will help you somehow.Once you seized old DC roles, configure new DC's FSMO roles properly and check for the difference.

    Useful link for Seizing FSMO roles:http://www.petri.co.il/seizing_fsmo_roles.htm

    • Check for any other errors by using DCDIAG.exe command.
    • Check for any DNS server errors by using nslookup command
    • If you want to check FSMO roles on any DC run netdom query fsmo command,it will display all 5 roles and its related DC (in your case single DC will have all 5 roles)
    • Since you have single DC at your place, there won't be any replication issues.
    • Finally I suggest you check event viewer all the time and check for any error/warning events on DC.


    Regards, Ravikumar P


  • 2012年6月21日 4:28
     
     

    Hello Ravikumar P

    I have followed the Seizing FSMO roles now the error is resolved.

    Thanks & Regards.,

    D. Ganesh Kumar


    Grow trees & Think Green

  • 2012年6月21日 8:41
     
     

    Hi Ganesh, 

    Good to see that your issue has been resolved :) 


    Regards, Ravikumar P

  • 2012年6月22日 7:31
     
      包含代码

    Hi Ravikumar

    After seizing the domain controller roles group policy and other services are working fine but the Directory Services through this below event 

    This is the replication status for the following directory partition on this directory server. 
     
    Directory partition:
    DC=ForestDnsZones,DC=ABC,DC=COM 
     
    This directory server has not recently received replication information from a number of directory servers.  The count of directory servers is shown, divided into the following intervals. 
     
    More than 24 hours:
    1 
    More than a week:
    1 
    More than one month:
    1 
    More than two months:
    1 
    More than a tombstone lifetime:
    1 
    Tombstone lifetime (days):
    180 
     
    Directory servers that do not replicate in a timely manner may encounter errors. They may miss password changes and be unable to authenticate. A DC that has not replicated in a tombstone lifetime may have missed the deletion of some objects, and may be automatically blocked from future replication until it is reconciled. 
     
    To identify the directory servers by name, use the dcdiag.exe tool. 
    You can also use the support tool repadmin.exe to display the replication latencies of the directory servers.   The command is "repadmin /showvector /latency <partition-dn>".

    How to resolve it.

    Thanks & Regards.,

    D. Ganesh Kumar


    Grow trees & Think Green

  • 2012年6月22日 8:16
     
     

    Hello, 

    I hope you have single DC at your place.Check whether DC consists of all 5 roles or not?

    Also check event viewer and try to find any new error/warning events recorded?

    Use dediag /v & dcdiag/test:replications /v commands and check for errors.


    Regards, Ravikumar P

  • 2012年6月22日 9:41
     
     

    Hi Ravikumar

    dcdiag /v contents

    http://pastebin.com/embed_js.php?i=FMEfexq4

    dcdiag /test:replications /v contents

    http://pastebin.com/embed_js.php?i=u8WmaZB4

    DC is attempting to receive the replication from server named EGB-SPSRVR but this is the one got formatted before 6 months.

    Thanks & Regards.,

    D. Ganesh Kumar


    Grow trees & Think Green