{"id":9066,"date":"2008-06-09T12:21:00","date_gmt":"1999-11-29T20:00:00","guid":{"rendered":"https:\/\/aidanfinn.com\/?p=9066"},"modified":"2008-06-09T12:21:00","modified_gmt":"1999-11-29T20:00:00","slug":"scom-saves-the-day-w2003-ad-replication-issue-resolved","status":"publish","type":"post","link":"https:\/\/aidanfinn.com\/?p=9066","title":{"rendered":"SCOM Saves The Day: W2003 AD Replication Issue Resolved"},"content":{"rendered":"<p>I recently deployed a new domain for a customer.\u00a0 Initially it had only one domain controller because we had to rush the network into production.\u00a0 We had a machine on order which I built up a few days later and promoted last Friday.\u00a0 I was doing some remote work on Saturday when I got some alerts about AD replication.\u00a0 I&#8217;d already had some of those after the initial DCPromo but I expect those after that first reboot while the directory\/SYSVOL replicates and FRS allows the server to become a DC for the first time.\n<\/p>\n<p>I logged into the DC&#8217;s and could find nothing wrong in the event logs.\u00a0 Absolutely nothing!\u00a0 AD replication, on the face of it, appeared fine.\u00a0 I logged into DC2 and tried to force replication between DC1 and DC2 and that&#8217;s when I found I got an error: &quot;Naming context is in the process of being removed or is not replicated from the specified server.&quot;\u00a0 Uh-Oh!\n<\/p>\n<p>How did SCOM notice this problem but the event logs didn&#8217;t?\u00a0 Installing a SCOM agent creates some containers and objects in the directory.\u00a0 SCOM agents update objects and measure to see how long it takes to replicate those changes between DC&#8217;s with agents on them.\u00a0 If it exceeds a pre-determined time then replication isn&#8217;t working correctly.\u00a0 It&#8217;s a perfect test.\n<\/p>\n<p>I tried to delete the KCC generated link object that was failing and replace it with a manual one via the GUI.\u00a0 That failed.\u00a0 So I resorted to using the Support tools (SUPPORT.MSI on the Server 2003 CD) and REPADMIN.\u00a0 The complete guide is <a href=\"http:\/\/www.informit.com\/content\/images\/0131467581\/downloads\/ReplicationFailsAfterReplicaDCPromotion.txt\" target=\"_blank\">available<\/a> to read.\n<\/p>\n<p>The high level steps were as follows:<\/p>\n<ul>\n<li>DC1 was OK.\u00a0 DC2 was failing to replicate from DC1.\u00a0 I logged into DC2.\n<\/li>\n<li>I installed the support tools on DC2.\n<\/li>\n<li>I opened the support tools CMD.\n<\/li>\n<li>I ran &quot;<em>readmin \/showreps DC2<\/em>&quot; on DC2 to retrieve the GUID&#8217;s of DC1 and DC2.\n<\/li>\n<li>I used AD Sites and Services to manually delete any connection objects to replicate from DC1 to DC2 (found under DC2).\n<\/li>\n<li>I ran &quot;<em>repadmin \/add &quot;cn=configuration,dc=mydomain,dc=internal&quot; &lt;DC1 GUID&gt;._msdcs.mydomain.internal &lt;DC2 GUID&gt;._msdcs.mydomain.internal<\/em>&quot;.\n<\/li>\n<li>I forced a full replication using &quot;<em>repadmin \/sync cn=configuration,dc=mydomain,dc=internal DC1 &lt;DC2 GUID&gt; \/force \/full<\/em>&quot;.\n<\/li>\n<li>I refreshed AD Sites and Services under D2 and forced a full replication there &#8211; everything was OK.\n<\/li>\n<li>I monitored SCOM for any more events.\u00a0 Everything was good.<\/li>\n<\/ul>\n<p>SCOM to the rescue!\n<\/p>\n<p>Credit: <a href=\"http:\/\/www.informit.com\/content\/images\/0131467581\/downloads\/ReplicationFailsAfterReplicaDCPromotion.txt\" target=\"_blank\">Gary Olsen<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I recently deployed a new domain for a customer.\u00a0 Initially it had only one domain controller because we had to rush the network into production.\u00a0 We had a machine on order which I built up a few days later and promoted last Friday.\u00a0 I was doing some remote work on Saturday when I got some &hellip; <a href=\"https:\/\/aidanfinn.com\/?p=9066\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;SCOM Saves The Day: W2003 AD Replication Issue Resolved&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-9066","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"aioseo_notices":[],"jetpack_featured_media_url":"","amp_enabled":true,"_links":{"self":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/9066","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=9066"}],"version-history":[{"count":0,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/9066\/revisions"}],"wp:attachment":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=9066"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=9066"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=9066"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}