Replikering af AD mellem 2 DC

Fandt det her med Active Directory Replication Monitor:

"DateTime","03-10-2007 15:06:31"
"PartnerType",">> Direct Replication Partner Data <<"
"DirectPartnerUSN","Property Update USN: 1568188"
"DirectPartnerFailure","Changes have not been successfully replicated from SRVPRINT for 104567 attempt(s)."
"DirectPartnerFailure","The reason is: "
"DirectPartnerFailure","The last replication attempt was:  10/3/2007 3:06:09 PM (local)"
"DateTime","03-10-2007 15:21:49"
"PartnerType",">> Direct Replication Partner Data <<"
"DirectPartnerUSN","Property Update USN: 1568188"
"DirectPartnerFailure","Changes have not been successfully replicated from SRVPRINT for 104580 attempt(s)."
"DirectPartnerFailure","The reason is: "
"DirectPartnerFailure","The last replication attempt was:  10/3/2007 3:20:18 PM (local)"
____________________________________________________

DC1 = SRVBACKUP
DC2 = SRVPRINT

Samt denne fejl:

Connection Name: SRVPRINT

    Replication Partner: Default-First-Site-Name\SRVPRINT
    Administrator Generated?: YES

    Reasons for this connection:
    ----------------------------
    Directory Partition (CN=Configuration,DC=xxx,DC=local)
          This replication connection is created because another replication partner has surpassed the allowed failure limit.
    Directory Partition (CN=Schema,CN=Configuration,DC=xxx,DC=local)
          This replication connection is created because another replication partner has surpassed the allowed failure limit.
    Directory Partition (DC=ForestDnsZones,DC=xxx,DC=local)
          This replication connection is created because another replication partner has surpassed the allowed failure limit.
    Directory Partition (DC=DomainDnsZones,DC=xxx,DC=local)
          This replication connection is created because another replication partner has surpassed the allowed failure limit.
    Directory Partition (DC=xxx,DC=local)
          This replication connection is created because another replication partner has surpassed the allowed failure limit.

Kig i første omgang i event loggen. Hvis der er fejl i NTFRS sektionen så tag dig af dem.

Event Type:    Warning
Event Source:    NtFrs
Event Category:    None
Event ID:    13508
Date:        03-10-2007
Time:        12:10:40
User:        N/A
Computer:    SRVPRINT
Description:
The File Replication Service is having trouble enabling replication from SRVBACKUP to SRVPRINT for c:\windows\sysvol\domain using the DNS name srvbackup.xxx.local. FRS will keep retrying.
Following are some of the reasons you would see this warning.

[1] FRS can not correctly resolve the DNS name srvbackup.xxx.local from this computer.
[2] FRS is not running on srvbackup.xxx.local.
[3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0d 00 00 00              ....   




Event Type:    Warning
Event Source:    NtFrs
Event Category:    None
Event ID:    13508
Date:        22-09-2007
Time:        10:43:39
User:        N/A
Computer:    SRVBACKUP
Description:
The File Replication Service is having trouble enabling replication from SRVPRINT to SRVBACKUP for c:\windows\sysvol\domain using the DNS name SRVPRINT.xxx.local. FRS will keep retrying.
Following are some of the reasons you would see this warning.

[1] FRS can not correctly resolve the DNS name SRVPRINT.xxx.local from this computer.
[2] FRS is not running on SRVPRINT.xxx.local.
[3] The topology information in the Active Directory for this replica has not yet replicated to all the Domain Controllers.

This event log message will appear once per connection, After the problem is fixed you will see another event log message indicating that the connection has been established.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: ba 06 00 00              º...

alright.. Så den replikerer simpelthen ikke hele sysvol share heller.

Download Windows 2003 support tools på begge maskiner. Hvis du har brugt replmon har du dem sikkert allerede.
skriv dcdiag /C på begge og den giver måske yderligere hints.

Check så at du kan lave "net view \\dcnavn" på begge og om sysvol kommer frem. Hvis den gør, så er det godt. Check af DFS kører på begge maskiner (sysvol replikeres via DFS).
Check dernæst dine DNS servere, og check hvilken DNS server hver af dine domain controllere benytter. De skal kun benytte din interne DNS infrastruktur.
Check at der ikke er to reverse records (IP -> Navn) for domain controllerne i DNS'en.

Prøv med GPMC at forbinde fra den ene domain controller til den anden. Hvis det lykkes, så prøv at klikke lidt rundt i GPMC. Melder den automatisk om konflikter når du browser visse foldere?

Havde tjekket DFS og om sharene var der, samt rettighederne på dem, og det så alt fint ud.

Jeg kørte en dcdiag /c som du foreslog, og det gav et spark i den rigtige retning :)

Her er hvad de ga. Nævner kun fejlene.
________________________________
SRVPRINT:

Starting test: frsevent
    There are warning or error events within the last 24 hours after the
    SYSVOL has been shared.  Failing SYSVOL replication problems may cause
    Group Policy problems.
    ......................... SRVPRINT failed test frsevent

              TEST: Forwarders/Root hints (Forw)
                  Error: Forwarders list has invalid forwarder: 192.168.1.11 (<n
ame unavailable>)
                  Error: Forwarders list has invalid forwarder: 192.168.1.12 (<n
ame unavailable>)

        Summary of test results for DNS servers used by the above domain contro
llers:

            DNS server: 192.168.1.11 (<name unavailable>)
              1 test failure on this DNS server
              This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 192.168.1.11

            DNS server: 192.168.1.12 (<name unavailable>)
              1 test failure on this DNS server
              This is not a valid DNS server. PTR record query for the 1.0.0.12
7.in-addr.arpa. failed on the DNS server 192.168.1.12

        Summary of DNS test results:

                                            Auth Basc Forw Del  Dyn  RReg Ext
              ________________________________________________________________
            Domain: xxx.local
              SRVPRINT                    PASS PASS FAIL PASS PASS PASS n/a

        ......................... xxx.local failed test DNS
________________________________
SRVBACKUP:

Starting test: frsevent
    There are warning or error events within the last 24 hours after the
    SYSVOL has been shared.  Failing SYSVOL replication problems may cause
    Group Policy problems.
    ......................... SRVBACKUP failed test frsevent

Starting test: systemlog
    An Error Event occured.  EventID: 0x0000165B
      Time Generated: 10/05/2007  07:34:05
      Event String: The session setup from computer 'PC001' failed
    An Error Event occured.  EventID: 0x000016AD
      Time Generated: 10/05/2007  07:40:40
      Event String: The session setup from the computer PC001
    ......................... SRVBACKUP failed test systemlog
________________________________

Til SRVPRINT:
192.168.1.11 og 192.168.1.12 er IKKE DNS servere.

De lå i Forwarders til All Other DNS Domains på DNS serveren på SRVPRINT.

De er nu slettet.

Nu replikerer de tilsyneladende som de ska :)

SRVBACKUP:
PC001 er min computer som er blevet meldt ind på SRVPRINT da den blev meldt ind i domænet

SRVPRINT er den der ikke vil replikere sine data over til SRVBACKUP.

Denne fejl er nu også væk :)

De eneste fejl der forekommer nu er:

Starting test: frsevent
    There are warning or error events within the last 24 hours after the
    SYSVOL has been shared.  Failing SYSVOL replication problems may cause
    Group Policy problems.
    ......................... SRVPRINT failed test frsevent

Er det en der løser sig selv?

Hvis du smider et svar, så gir jeg point. Det er velfortjent :)

et svar..

Du kan prøve på srvprint:
net stop ntfrs
net start ntfrs

Der skulle gerne være et event i ntfrs loggen som lyder noget i stil med "All problems preventing this domain controller from replicating have been solved", og så noget mere.
Hvis du ser den, så bare slap af og vent.


Iøvrigt: dcdiag er et kick-ass tool. Det samme er netdiag.

Ja det må man sige... Jeg takker endnu en gang :)