Cannot enable inbound sync on RODC with repadmin /options server -disable_inbound_repl

-

after making modifications our active directory caused more replication traffic expected (it killed our 2x34mbit lines) had resort stopping inbound replication on the dcs in our branch offices using command: repadmin /options server +disable_inbound_repl.

we allowing servers sync again, works our normal dcs rodcs not accepting command: repadmin /options server -disable_inbound_repl. executes correctly doesn't seem apply.

is there can overcome this?

c:\>repadmin /options myrodc -disable_inbound_repl
current dsa options: is_gc disable_inbound_repl disable_outbound_repl is_rodc
new dsa options: is_gc disable_outbound_repl is_rodc

c:\>repadmin /showreps myrodc
site10\myrodc
dsa options: is_gc disable_inbound_repl disable_outbound_repl is_rodc
site options: (none)
dsa object guid: f8a33add-600f-40f0-ac8f-f70ab746de16
dsa invocationid: c846f9eb-0032-4703-9eed-832163d3f6a5

when try run command:

repadmin /replicate myrodc myhubdc cn=configuration,dc=mydomain,dc=com /readonly /force

i reply:

dsreplicasync() failed status 8452 (0x2104):
    naming context in process of being removed or not replicated specified server.

we're talking environment 100+ rodc , active directory database 3.6 gb demotion , promotion not valid option. forest functional level 2003, have 2003 r2, 2008r2 , 2008 r2 rodcs.

all repadmin commands should force or overrule disable_inbound_repl option have failed.

we discovered there different information in ntds attribute (which lives in configuration partition under sites/sitename/servers/servername) of rodc there in same attribute on normal dc (which makes sense after trying different fixes day). setting had on normal dc correct needed way rodc. since full replication of configuration partition failed ended trying replicate 1 object , did trick.

i have been able 4 boxes syncing again following procedure:

  • branch-rodc = read dc (with sync problem)
  • hub-rwdc = dc/gc writeable copy
  1. repadmin /options branch-rodc -disable_inbound_repl /homeserver:hub-rwdc
  2. repadmin /replsingleobj branch-rodc hub-rwdc "cn=ntds settings,cn=branch-rodc,cn=servers,cn=branchsite,cn=sites,cn=configuration,dc=corp,dc=com"
  3. repadmin /kcc branch-rodc
  4. repadmin /showrepl 
  5. (examine output of showrepl , in next command replace name hub-rwdc server selected kcc process)
  6. repadmin /replicate branch-rodc hub-rwdc cn=configuration,dc=corp,dc=com

that pretty seems going again. have got on hundred go time start scripting...

thanks suggestions.



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

server manager error: ADAM.events.xml could not be enumerated.

-
firewall off isnt it. rerun ldap wizard:?  why?  will screw exchange server running on machine?  ldap wizard asks questions don't understand. please dont send generic links to: http://social.technet.microsoft.com/wiki/contents/articles/13444.windows-server-2012-server-manager-troubleshooting-guide-part-ii-troubleshoot-manageability-status-errors-in-server-manager.aspx thanks, john hi john, >> ok. server manager app. these questions refer this. nothing else 2.  do need create app dir or not?  this server manager, shouldnt done? (why did break in first place?) how check if app dir exists server manager or not. 3.  if "lightweight" implementation of anything, sure hate see "heavyweight" version. the waring events can't enumerated. , cause not completing configuration of ad lds. ad lds not related server manager. used provide flexible support directory-enabled applications. if not implementing such applications, remove role. her
Read more

Cannot access Anywhere Access using domain name?

-
after installing anywhere access in windows server 2012 essentials r2, cannot use anywhere access using setup domain name in wizard such remote.mydomain.com? if enter public ip address, example, 72.2.34.5 works. before set anywhere access, created a record pointing public address...pinged , worked...so not sure doing wrong?  is wizard supposed create record etc , make remote.mydomain.com work? if enter public ip address while on lan, takes me router webpage.  shouldn't work on lan if accessed via public ip? thank you, tim. the wizard can configure remote.microsoft_names.com  remote.remotewebaccess.com but cannot configure domains purchased outside wizard.  depends on how domain configured if wildcard.yourdomain.com should work  if try ping remote.your_domain.com afar , not give proper  public ip, need add record mariette said. much have record domain.com www.domain.com , if have website somewhere else www.domain.com , need remote.domain.com go box gr
Read more

WMI Failure: Unable to update Local Resource Group

-
Image
hi i have windows server 2008 r2 enterprise terminal services installed. this has been working fine, unable add new computers local computer groups policy on rd gateway manager i following error wmi failure: unable update local resource group  just confirm on , resource authorization policies then manage local computer groups hi hussain, posting in windows server forum. firstly please let know, did find particular event log issue? please ensure have configured rap settings correctly , set correct value , permissions rap.xml file , rapstore registry key. please check below thread more details. 1. wmi failure- unable create resource access policy (answered clarence) 2. event id 543 — rd gateway server configuration 3. event id 642 — rd gateway server availability hope helps! thanks, dharmesh Windows Server
Read more