ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Solved AD Sync between two Sites

    IT Discussion
    server 2012 active directory security sync issues replication
    6
    16
    2.9k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      LAH3385
      last edited by

      A screen shots of the error message would be a very good start.

      I once had replication issue before, but that was due to AD on one of the server contain lingering object. Not sure if it is the same as what you are experiencing or not.

      L 1 Reply Last reply Reply Quote 0
      • coliverC
        coliver
        last edited by

        You may want to look into the repadmin command. This will give you an insight into how the replication is working. I think it can even output log files associated with AD replication.

        DashrenderD 1 Reply Last reply Reply Quote 1
        • L
          LAH3385 @LAH3385
          last edited by

          @LAH3385 I guess a better question for you is: How did you know, or realized, AD replication has stop working?

          gjacobseG 1 Reply Last reply Reply Quote 1
          • scottalanmillerS
            scottalanmiller
            last edited by

            Network connectivity is a big factor. How fast is it, how reliable is it.

            1 Reply Last reply Reply Quote 1
            • gjacobseG
              gjacobse @LAH3385
              last edited by

              @LAH3385 said:

              @LAH3385 I guess a better question for you is: How did you know, or realized, AD replication has stop working?

              Created User on one side of AD,.. checked the other side, User was NOT there.

              DashrenderD 1 Reply Last reply Reply Quote 0
              • DashrenderD
                Dashrender @gjacobse
                last edited by

                @gjacobse said:

                @LAH3385 said:

                @LAH3385 I guess a better question for you is: How did you know, or realized, AD replication has stop working?

                Created User on one side of AD,.. checked the other side, User was NOT there.

                long distance replication can take over 15 mins to happen.

                gjacobseG 1 Reply Last reply Reply Quote 0
                • DashrenderD
                  Dashrender @coliver
                  last edited by

                  @coliver said:

                  You may want to look into the repadmin command. This will give you an insight into how the replication is working. I think it can even output log files associated with AD replication.

                  reposted

                  here are some additional notes
                  https://technet.microsoft.com/en-us/library/cc794749(v=ws.10).aspx?f=255&MSPPError=-2147217396

                  1 Reply Last reply Reply Quote 0
                  • gjacobseG
                    gjacobse @Dashrender
                    last edited by

                    @Dashrender said:

                    @gjacobse said:

                    @LAH3385 said:

                    @LAH3385 I guess a better question for you is: How did you know, or realized, AD replication has stop working?

                    Created User on one side of AD,.. checked the other side, User was NOT there.

                    long distance replication can take over 15 mins to happen.

                    I expected as much.

                    It's been a hour now.

                    DashrenderD 1 Reply Last reply Reply Quote 0
                    • DashrenderD
                      Dashrender @gjacobse
                      last edited by

                      @gjacobse said:

                      @Dashrender said:

                      @gjacobse said:

                      @LAH3385 said:

                      @LAH3385 I guess a better question for you is: How did you know, or realized, AD replication has stop working?

                      Created User on one side of AD,.. checked the other side, User was NOT there.

                      long distance replication can take over 15 mins to happen.

                      I expected as much.

                      It's been a hour now.

                      what does repadmin tell you?

                      1 Reply Last reply Reply Quote 0
                      • gjacobseG
                        gjacobse
                        last edited by

                        C:\Windows\system32>repadmin /showrepl
                        
                        Repadmin: running command /showrepl against full DC localhost
                        DomainName \Srvr-DC3
                        DSA Options: IS_GC
                        Site Options: (none)
                        DSA object GUID: 1a460929-6e4c-4fc3-8377-5ef3b92b422d
                        DSA invocationID: d85ce1be-42cb-423c-9187-1135bcf58f94
                        
                        ==== INBOUND NEIGHBORS ======================================
                        
                        DC=Domain Name,DC=com
                            Default-First-Site-Name\Srvr-DC2 via RPC
                                DSA object GUID: xxxxxxx-xxxx-xxxx-xxxx-f589d72ba337
                                Last attempt @ 2016-02-24 10:03:26 was successful.
                        
                        CN=Configuration,DC=Domain Name,DC=com
                            Default-First-Site-Name\Srvr-DC2 via RPC
                                DSA object GUID: xxxxxxx-xxxx-xxxx-xxxx-f589d72ba337
                                Last attempt @ 2016-02-24 10:03:26 was successful.
                        
                        CN=Schema,CN=Configuration,DC=Domain Name,DC=com
                            Default-First-Site-Name\Srvr-DC2 via RPC
                                DSA object GUID: xxxxxxx-xxxx-xxxx-xxxx-f589d72ba337
                                Last attempt @ 2016-02-24 10:03:27 was successful.
                        
                        DC=DomainDnsZones,DC=Domain Name,DC=com
                            Default-First-Site-Name\Srvr-DC2 via RPC
                                DSA object GUID: xxxxxxx-xxxx-xxxx-xxxx-f589d72ba337
                                Last attempt @ 2016-02-24 10:03:27 was successful.
                        
                        DC=ForestDnsZones,DC=Domain Name,DC=com
                            Default-First-Site-Name\Srvr-DC2 via RPC
                                DSA object GUID: xxxxxxx-xxxx-xxxx-xxxx-f589d72ba337
                                Last attempt @ 2016-02-24 10:03:27 was successful.
                        

                        looking to force replication now.

                        1 Reply Last reply Reply Quote 0
                        • coliverC
                          coliver
                          last edited by

                          I think it is

                          repadmin /replicate DC1 DC2 dc=domain,dc=com
                          
                          1 Reply Last reply Reply Quote 1
                          • DashrenderD
                            Dashrender
                            last edited by

                            Everything looks good - I've heard of replication taking up to 4 hours before.

                            gjacobseG 1 Reply Last reply Reply Quote 1
                            • gjacobseG
                              gjacobse @Dashrender
                              last edited by

                              It just occurred to me... does it matter which end this is performed from?

                              1 Reply Last reply Reply Quote 0
                              • T
                                thedalton @gjacobse
                                last edited by

                                @gjacobse you may want to check your site link replication schedule. The default is 180 minutes. You can drop it down to 15 minutes

                                1 Reply Last reply Reply Quote 2
                                • gjacobseG
                                  gjacobse
                                  last edited by

                                  @coliver said:

                                  repadmin /replicate DC1 DC2 dc=domain,dc=com

                                  So I have have limited success.. but success was made. I the user I created on the other end,.. is now on the local AD.

                                  I'll look at this more,.. but think it's otherwise solved.

                                  1 Reply Last reply Reply Quote 0
                                  • 1 / 1
                                  • First post
                                    Last post