locked
Events 1083 and 1955 RRS feed

  • Question

  • We're getting these events between several times a day and several times a week. The events reference our domain administrator account which we are not changing. We do run several scheduled jobs with this account.

    I tried following the directions in KB296714, and was lead to KB224544 but I don't see the GUID when I search using the settings described.

    The events are below

    Log Name: Directory Service
    Source: Microsoft-Windows-ActiveDirectory_DomainService
    Date: 7/19/2010 9:17:48 AM
    Event ID: 1083
    Task Category: Replication Level:
    Warning Keywords:
    Classic User: ANONYMOUS LOGON
    Computer: serverName.companyName.com
    Description: Active Directory Domain Services could not update the following object with changes received from the directory service at the following network address because Active Directory Domain Services was busy processing information.

    Object:
    CN=userName,CN=Users,DC=companyName,DC=com
    Network address:
    GUID._msdcs.companyName.com

    This operation will be tried again later.

    And

    Log Name: Directory Service
    Source: Microsoft-Windows-ActiveDirectory_DomainService
    Date: 7/19/2010 9:17:48 AM
    Event ID: 1955
    Task Category: Replication Level:
    Information Keywords:
    Classic User: ANONYMOUS LOGON
    Computer: serverName.comapnyName.com
    Description: Active Directory Domain Services encountered a write conflict when applying replicated changes to the following object.

    Object:
    CN=userName,CN=Users,DC=comapnyName,DC=com Time in seconds:
    0

    Event log entries preceding this entry will indicate whether or not the update was accepted. A write conflict can be caused by simultaneous changes to the same object or simultaneous changes to other objects that have attributes referencing this object. This commonly occurs when the object represents a large group with many members, and the functional level of the forest is set to Windows 2000. This conflict triggered additional retries of the update. If the system appears slow, it could be because replication of these changes is occurring.

    User Action
    Use smaller groups for this operation or raise the forest functional level to Windows Server 2003.

    How do I find the offending machines and resolve this issue? Thanks.

    Wednesday, November 3, 2010 3:18 PM

Answers

  • What operating system and SP levels are the DCs? What functional level is the domain and forest set to?

    To find the GUID, simply click on the _msdcs.domain.com zone. It will show up in the right window pane. It's a long alphameric ALIAS. Each DC registers a GUID in the forest. Are you saying it's missing for this DC?

    Can you provide an ipconfic /all from your DCs, please. This will help evaluate your configuration to determine if it is a cause.

    Here are some references for this event:

    http://eventid.net/display.asp?eventid=1083&eventno=919&source=NTDS Replication&phase=1

    http://eventid.net/display.asp?eventid=1955&eventno=4301&source=NTDS Replication&phase=1

     

    Regards,
    Ace 


    Ace Fekay
    MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services

    This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    • Marked as answer by Bruce-Liu Friday, November 12, 2010 11:49 AM
    Wednesday, November 3, 2010 8:07 PM
  • Hello,

    do you also realize account lockouts, then chekc the account lockout tools:

    http://technet.microsoft.com/en-us/library/cc738772(WS.10).aspx http://technet.microsoft.com/en-us/library/cc776964(WS.10).aspx

    See also: http://support.microsoft.com/kb/306091

    If all suggestions doesn't help please provide the support tools output:

    dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt
    netdiag /v >c:\netdiag.txt [from each DC, netdiag may work but isn't supported with Windows server 2008 and higher]
    repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt (if more then one DC exists)
    dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045)

    As the output will become large, DON'T post them into the thread, please use Windows Sky Drive and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    • Marked as answer by Bruce-Liu Friday, November 12, 2010 11:49 AM
    Thursday, November 4, 2010 7:12 AM

All replies

  • What operating system and SP levels are the DCs? What functional level is the domain and forest set to?

    To find the GUID, simply click on the _msdcs.domain.com zone. It will show up in the right window pane. It's a long alphameric ALIAS. Each DC registers a GUID in the forest. Are you saying it's missing for this DC?

    Can you provide an ipconfic /all from your DCs, please. This will help evaluate your configuration to determine if it is a cause.

    Here are some references for this event:

    http://eventid.net/display.asp?eventid=1083&eventno=919&source=NTDS Replication&phase=1

    http://eventid.net/display.asp?eventid=1955&eventno=4301&source=NTDS Replication&phase=1

     

    Regards,
    Ace 


    Ace Fekay
    MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer
    Microsoft MVP - Directory Services

    This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    • Marked as answer by Bruce-Liu Friday, November 12, 2010 11:49 AM
    Wednesday, November 3, 2010 8:07 PM
  • Hello,

    do you also realize account lockouts, then chekc the account lockout tools:

    http://technet.microsoft.com/en-us/library/cc738772(WS.10).aspx http://technet.microsoft.com/en-us/library/cc776964(WS.10).aspx

    See also: http://support.microsoft.com/kb/306091

    If all suggestions doesn't help please provide the support tools output:

    dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt
    netdiag /v >c:\netdiag.txt [from each DC, netdiag may work but isn't supported with Windows server 2008 and higher]
    repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt (if more then one DC exists)
    dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045)

    As the output will become large, DON'T post them into the thread, please use Windows Sky Drive and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB.


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    • Marked as answer by Bruce-Liu Friday, November 12, 2010 11:49 AM
    Thursday, November 4, 2010 7:12 AM