AD replication problem

Wing · Guest

Hi all,

I have a problem with AD replication between 2 domains.

I have created a tree that contains 2 domains (wingfirm.biz and
ecoast.wingfrim.com) with windows 2003.

In wingfrim.biz, the DNS DHCP and one domain controller (DC1) were
built, the domain function level is Mixed mode.

The childe.mydomain.com only has one domain controller (SVR1). The
domain function level is Mixed mode.

Both domain controller are Global Catalog server and RID, PDC,
Infrastructure FSMO in their own domain. They are in the same Site.

In the AD Site and Services MMC, click Sites -> HQ -> DC1 -> NTDS
Settings. Right click the connection object inside and select Replicate
Now, then I have following warning:

The following error occurred during the attempt to synchronize naming
context ecoast.wingfrim.biz from domain controller SVR1 to domain
controller DC1:
The replication operation failed because of a schema mismatch between
the server involved. This operation will not continue.

In the AD Site and Services MMC, click Sites -> HQ -> SVR1 -> NTDS
Settings. Right click the connection object inside and select Replicate
Now, then I have following warning:

The following error occurred during the attempt to synchronize naming
context configuration from domain controller DC1 to domain controller
SVR1: Access is denied. This operation will not continue.

Few hours ago I have install the Exchange 2003, the installation was
running fine. I am not quite sure if this is the reason why I have
replication problem because I know the installation will change the
schema setting.

I had ran the dcdiag.exe command on both domain controllers, the result
from DC1 was looking fine, pass all the test. But in SVR1, partial
result was worrying me.

----------------------------------------------------------------------------------------------------------------
domain controller diagnosis
performing initial setup:
done gathering initaila info.
doing initial required tests
testing server: HQ\SVR!
Starting test: connectivity
....................................SVR1 passed test
connectivity
doing primary tests
testing server: HQ\SVR!
starting test: replications
[replication check, SVR1] A recent replication attempt
failed:
From DC1 to SVR1
Naming context: CN=schema, CN=Configuration,
DC=Wingfirm, DC=biz
the replication generated an error (5):
Access is denied.
The failure occurred at 2006-05-08 01:56:18
The last success occurred at 2006-05-07 22.50.39
5 failures have occurred since the last success.

[replication check, SVR1] A recent replication attempt
failed:
From DC1 to SVR1
Naming context: CN=Configuration, DC=Wingfirm, DC=biz
the replication generated an error (5):
Access is denied.
The failure occurred at 2006-05-08 02:07:04
The last success occurred at 2006-05-07 22.50.39
14 failures have occurred since the last success.
....................................................... SVR1
passed test replications
----------------------------------------------------------------------------------------------------------------

Could anyone give me some clue what's reason lead to this error.

Thanks for reading this long message.

Wing

Vicky · Guest

do u have a DNS server for both the domains configured & replicated.

By the way since both the domains DC's are in the same site, u dont have to
configure any thing with ad sites & services.

"Wing" wrote:

Jorge de Almeida Pinto [M · Guest

the schema mismatch thing should resolve itself eventually (assuming
replication is OK). that usually happends when the schema is updated.

any "interesting" event IDs on the DCs in question?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------

-----------------------------------------------------------------------------
"Wing" <li.alwin@gmail.com> wrote in message
news:1147664907.744027.194070@j55g2000cwa.googlegroups.com...

Wing · Guest

my DNS server contains 2 zone file for 2 domains seperately.
I haven't try to configure any thing in AD site and services, i just
try to activate the local replication manually.

Wing · Guest

Thanks for your information.