none
Inter-Site Topology Generator shows Invalid Server and Site RRS feed

  • Question

  • I am in the process of replacing the Windows 2003 R2 DCs in my branch offices with Windows 2008 R2 RODCs. I am using a hub and spoke topology and my hub DCs are Windows 2008 R2. When I go to AD Sites and Services, Sites, Site-name, NTDS Site Settings, on the Site Settings tab under Inter-Site Topology Generator it shows Invalid for the Server and Site entries. I wonder if I need to use the attribute editor to delete some values. I have another new site that started with a RODC and the ISTG values appear to be NULL. Is this something that is important? How do I fix it?

    I have another site that just got its new RODC yesterday where the original W2K3 R2 DC is offline, but it appears as the ISTG. I am getting several ActiveDirectory_DomainService events 1311, 1865, 2904, 1566

     

    Log Name:      Directory Service
    Source:        Microsoft-Windows-ActiveDirectory_DomainService
    Date:          3/23/2011 12:07:19 PM
    Event ID:      1311
    Task Category: Knowledge Consistency Checker
    Level:         Error
    Keywords:      Classic
    User:          ANONYMOUS LOGON
    Computer:      BRDC2.domain.com
    Description:
    The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition.
     
    Directory partition:
    CN=Configuration,DC=domain,DC=com
     
    There is insufficient site connectivity information for the KCC to create a spanning tree replication topology. Or, one or more directory servers with this directory partition are unable to replicate the directory partition information. This is probably due to inaccessible directory servers.
     
    User Action
    Perform one of the following actions:
    - Publish sufficient site connectivity information so that the KCC can determine a route by which this directory partition can reach this site. This is the preferred option.
    - Add a Connection object to a directory service that contains the directory partition in this site from a directory service that contains the same directory partition in another site.
     

    Wednesday, March 23, 2011 8:00 PM

Answers

All replies

  • To troubleshoot event ID 1311, refer to this Microsoft article:

    http://support.microsoft.com/kb/214745

    To troubleshoot event ID 1865, refer to this Microsoft article;

    http://technet.microsoft.com/en-us/library/cc756648(WS.10).aspx

    For more information, refer to the resolution mentioned in this thread:

    http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/e5b78054-abc0-41bc-9972-13cb5b876327

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

     

    Wednesday, March 23, 2011 9:35 PM
  • Hello,

    please see: http://social.technet.microsoft.com/wiki/contents/articles/event-id-1311-microsoft-windows-activedirectory-domainservice.aspx

    Is AD sites and services configured according to your requirements? Are firewalls in between?


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Wednesday, March 23, 2011 11:15 PM
  • Let's ignore the 1311 errors for now. There was another 2003 R2 DC in the site that died, but it was still in AD. I deleted it from Sites and Services, which did a metadata cleanup and removed the server object from AD (thank you Microsoft for making it easy!). I don't think that I am seeing more errors in the event logs, but I would like to know if the NTDS Site Settings Properties showing the Inter-Site Topology Generator server and site as being Invalid is a problem, and how to correct it.
    Thursday, March 24, 2011 10:28 PM
  • Hello,

    please upload a screenshot to Windows sky drive from this "invalid" problem. Did you try to use "repadmin /kcc" to recalculate the topology?


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Friday, March 25, 2011 6:46 AM
  • Is there proper connectivity between all the sites & they can ping each other with IP as well as DNS.

    There is no firewall blocking the ports or dc's from communicating from each other, if you doubt use portquery tool.

    I would also verify sites,subnets are created correctly & mapped to their respective site, as well site links are also mapped properly.

    http://technet.microsoft.com/en-us/library/cc730868.aspx


    Open ADSIEdit or LDP & look for  the "interSiteTopologyGenerator" attribute of the "NTDS Site Settings" object contains the distinguishedName of the ISTG. To configure a new Domain Controller as the ISTG since there can be only one DC to ISTG in a site, you need to specify the distinguisged Name of the NTDS Settings object that belongs to a healthy DC.

    The location is  CN=NTDS Settings,CN=DCname,CN=Servers,CN=sitenmae,CN=Sites,CN=Configuration,DC=AD,DC=LAN

    You can delete all the object from all the sites & run repadmin tool using below cmd to regenerate the connection object automatically.

    repadmin /kcc *

    Force the replication using repadmin /syncall /APed

    Above cmd will force the replication between all the DC's in domain & might increase the replication traffic.

    http://support.microsoft.com/kb/224599

     

    Take a look at the below discussion

    Load balancing replication connections across multiple DC’s at hub site

    http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/f2f06828-9566-4cc9-ad8a-6ffa0dd2a105/

    Verify replication is working properly between all the dc's using repadmin /showreps or repadmin /replsummary.

     

    Regards


    Awinish Vishwakarma| MY Blog

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    Friday, March 25, 2011 8:46 AM
    Moderator
  • Hi,

     

    I would like to confirm what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know, and I will be happy to help.

     

    Regards,

     

    Arthur Li

     TechNet Subscriber Support  in forum

    If you have any feedback on our support, please contact tngfb@microsoft.com .


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Tuesday, March 29, 2011 7:00 AM
    Moderator
  • Here is a link to a screenshot of the error.

    https://cid-78efea4e1b9fe496.photos.live.com/self.aspx/Technical/ScreenShot026.png

    Running repadmin /kcc * doesn't change anything. Sites and services has all of the subnets defined and placed in sites. All of the DCs are in the correct sites. The DCs are healthy, but the site used to have a full writeable DC and now they only have RODCs.

    Wednesday, March 30, 2011 12:29 AM
  • The first DC in site plays the role of ISTG, the role is not transferred to any other DC unless it is down or removed, so in your case, there might be condition of server being failed but it references has not been removed due to which AD knows this server is alive & plays the role of ISTG, if its like that look for failed dc whose metadata cleanup has not been performed or it might happen that dc has become lingering objects.

    More at below link for invalid ISTG invalid error.

    https://msmvps.com/blogs/systmprog/archive/2006/11/01/Inter_2D00_Site-Topology-Generator-Invalid.aspx

     

    Lingering object issues

    http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/9f114f3f-e8ef-4ac6-846f-8e61d6324d9a

     

    Regards  


    Awinish Vishwakarma| MY Blog

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    Wednesday, March 30, 2011 5:49 AM
    Moderator