DCSIMG
AD Replication Errors - Dario IT Solutions Blog

Dario IT Solutions Blog

AD Replication Errors

If you have 2 Active Directory Servers that are not replicating, ServerA & ServerB, try the following:

First follow this link to check permissions - http://207.46.196.114/windowsserver2008/en/library/89bad964-55c9-4ce4-b216-d4e1f13df9491033.mspx?mfr=true

Then check if the secure channel has been corrupted -
From ServerA, go to Start -> Run and type:  \\ServerB
From ServerB, go to Start -> Run and type:  \\ServerA

If you get and error message indicating that the target name is incorrect, then the the secure channel has been corrupted.  You will also see error messages in replmon and "repadmin debug" indicating that the target is invalid as well.

Perform the following steps to fix the problem:

  1. Stop the Kerberos Key Distribution Center (KDC) service, and then set it to Manual startup.
  2. Run "netdom resetpwd /server:<replication_partner_name> /userd:<domain\admin_user> /passwordd:*"
  3. Restart the computer, start the KDC, and then set it back to Automatic startup.