none
Active Directory Domain Controller Issues: RRS feed

  • Question

  • Hi Experts: 

    Can someone help us to determine what's the exact causes of this kind of issues? And what is the best practices to resolved it ? Please advise what's the best method for this 

    Exact Issue encountered : 

    Six (6) domain controllers experiencing replication issues

    Client computers unable to authenticate because of “trust relationship” issue

    Client computers unable to access servers due to DNS resolution issue

    The session setup from the computer KDTW414 failed to authenticate. The name(s) of the account(s) referenced in the security database is KDTW414$.  The following error occurred: Access is denied.
    Remote Desktop Services has taken too long to load the user configuration from server \\KDTB008..***.*** for user administrator
    Remote Desktop Services has taken too long to load the user configuration from server \\KDTB008..***.*** for user administrator
    The session setup from the computer KDTW321 failed to authenticate. The name(s) of the account(s) referenced in the security database is KDTW321$.  The following error occurred: Access is denied.
    The session setup from the computer KDTW416 failed to authenticate. The name(s) of the account(s) referenced in the security database is KDTW416$.  The following error occurred: Access is denied.
    Access to drivers on Windows Update was blocked by policy
    Access to drivers on Windows Update was blocked by policy
    Access to drivers on Windows Update was blocked by policy

    The session setup from the computer KDTW412 failed to authenticate. The name(s) of the account(s) referenced in the security database is KDTW412$.  The following error occurred: Access is denied.

    1162 Internal Processing Internal event: The Address Book hierarchy table has been rebuilt.
    1863 Replication This is the replication status for the following directory partition on this directory server.   Directory partition: DC=ForestDnsZones,DC=******,DC=******   This directory server has not received replication information from a number of directory servers within the configured latency interval.   Latency Interval (Hours): 24 Number of directory servers in all sites: 1 Number of directory servers in this site: 1   The latency interval can be modified with the following registry key.   Registry Key: HKLM\System\CurrentControlSet\Services\NTDS\Parameters\Replicator latency error interval (hours)   To identify the directory servers by name, use the dcdiag.exe tool. You can also use the support tool repadmin.exe to display the replication latencies of the directory servers.   The command is "repadmin /showvector /latency <partition-dn>".

    This is the replication status for the following directory partition on this directory server.   Directory partition: DC=ForestDnsZones,DC=******,DC=******   This directory server has not received replication information from a number of directory servers within the configured latency interval.   Latency Interval (Hours): 24 Number of directory servers in all sites: 1 Number of directory servers in this site: 1   The latency interval can be modified with the following registry key.   Registry Key: HKLM\System\CurrentControlSet\Services\NTDS\Parameters\Replicator latency error interval (hours)   To identify the directory servers by name, use the dcdiag.exe tool. You can also use the support tool repadmin.exe to display the replication latencies of the directory servers.   The command is "repadmin /showvector /latency <partition-dn>".


    Homer Sibayan

    • Moved by nzpcmad1 Thursday, September 5, 2019 6:39 PM From ADFS
    Tuesday, September 3, 2019 6:49 AM

All replies

  • Hello Remoh_10

    Please check the following link and I hope It'll help you to fix your problem quickly.

    https://theitbros.com/fix-trust-relationship-failed-without-domain-rejoining/


    Hamid Sadeghpour Saleh Microsoft MCT Regional Lead

    hamidsadeghpour.net

    Mark it as answer if your question has solved in order to keep forums updated.

    Tuesday, September 3, 2019 7:36 AM
    Moderator
  • Bro, please post the result of DCDIAG /V /C /E Q

    Mark the answer if it helps you.

    Wednesday, September 4, 2019 6:34 AM
  •  

    Hi,

     

    Just want to confirm the current situations.

     

    Please feel free to let us know if you need further assistance.

     

    Best Regards,

    William


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, September 10, 2019 7:42 AM
  • Hi,

     

    Was your issue resolved?

     

    If you resolved it using our solution, please "mark it as answer" to help other community members find the helpful reply quickly.

    If you resolve it using your own solution, please share your experience and solution here. It will be very beneficial for other community members who have similar questions.

    If no, please reply and tell us the current situation in order to provide further help.

     

    Best Regards,

    William

     


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, September 17, 2019 9:44 AM