IT Toolbox
Menu
Français
HomeHow to check Active Directory replication
Guide

How to check Active Directory replication

Failure to perform Active Directory can cause inconsistent GPOs, different accounts depending on DCs or errors d, authentication

TopicIT resources → About 1 min read

Failure to perform Active Directory can cause inconsistent GPOs, different accounts depending on DCs or errors of authentication.

Steps.

  1. Identify controllers – List the DCs and sites concerned.
  2. Get a summary — Use repadmin /replucummary to detect mistaken partners.
  3. See details — Run repadmin/showrepl on the DC concerned.
  4. Control DNS and time —Detach resolution between DC and timing.
  5. Reviewing Events — Consult the Directory Service, DFS Replication and System.

Commands

repadmin /replsummary
repadmin /showrepl
dcdiag /test:dns /v

Key takeaways

  • Do not force replication until the network cause or DNS is understood.
  • An old re-establishment of a DC, a good good old-fashioned one requires special attention.
  • Document errors by partner and the name of the partner.

See also:. Event ID 1865..

Related resources

Relevant topic Active Directory replication failed One or more domain controllers no longer respond correctly Relevant topic Diagnose degraded Active Directory replication Structured procedure before intrusive action on domain controllers Relevant topic Event ID 1864 — Active Directory replication too old or absent A domain controller reports that he has not recently received replication from some partners Relevant topic How to check an LDAPS certificate on Active Directory Check the certificate presented by a domain controller, its trust chain, name, and expiration before troubleshootin... Relevant topic Active Directory account locks in loop The account is unlocked and then locks again quickly
Support the development of BAOI Hosting, domains and new IT resources.
❤️ Support BAOI

My favorites