I will give my rep a call and see if they can get it for me. Would be nice if MS put up KB's talking about known problems but is another story for another day.
Thanks! Steve -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent: Wednesday, March 17, 2004 10:58 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Problems with dcdiag showing replication latency between Windows 2000 and Windows 2003 Hi Steven, There is a new dcdiag.exe available (but not publicly yet). If you have a Premier account, you can reference KB832628. I had a different issue than the one you are reporting. The new executable solved my problem (truncated output when run with the /e switch. I believe MS is packaging this new executable to be part of W2K3/SP1. Mike Thommes Argonne National Laboratory -----Original Message----- From: Bell, Stephen [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 17, 2004 11:32 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Problems with dcdiag showing replication latency between Windows 2000 and Windows 2003 Problem: In a multi-domain forest with 2003 at the root, 1 2003 child domain, and 8 2000 child domains (all child domains in one tree) when running dcdiag on any of the 2003 domain controllers in the child domain, it shows replication latency warnings between the 2003 and all the other domains. (portion of dcdiag output shown below). Additionally the NCSecDesc test shows as failed for not all domains having the "replicating directory changes all access rights for the naming context". When running dcdiag at the root all tests show pass with no warnings. When checking replication with replmon and repadmin, all tests show that replication is working correctly between all domains. Thoughts: I think this is an issue with dcdiag but could be wrong. Replication is working and is confirmed by running replmon and repadmin. I think (based on some kb's and Google searches) that the NCSecDesc test failure is misleading as it can be ignored (kb 829306 is close but not the exact error). Is this something that anyone else has seen? What exactly would cause this if in fact it was a real error? Thanks Steve Doing primary tests Testing server: DOLOly0001\DOLGCOLY02 Starting test: Replications REPLICATION-RECEIVED LATENCY WARNING Source site: CN=NTDS Site Settings,CN=WAOly0001,CN=Sites,CN=Configuration,DC=wa,DC=lcl Current time: 2004-03-15 13:18:11 Last update time: 2004-03-11 14:23:37 Check if source site has an elected ISTG running. Check replication from source site to this server. snipped to avoid really long post........ REPLICATION-RECEIVED LATENCY WARNING Source site: CN=NTDS Site Settings,CN=ESD1GUIDE01,CN=Sites,CN=Configuration,DC=wa,DC=lcl Current time: 2004-03-15 13:18:11 Last update time: 2004-03-11 14:23:37 Check if source site has an elected ISTG running. Check replication from source site to this server. ......................... DOLGCOLY02 passed test Replications Starting test: NCSecDesc Error GA\Domain Controllers doesn't have Replicating Directory Changes All access rights for the naming context: DC=ga,DC=wa,DC=lcl Error LNI\Domain Controllers doesn't have Replicating Directory Changes All access rights for the naming context: DC=lni,DC=wa,DC=lcl Error DSHS\Domain Controllers doesn't have Replicating Directory Changes All access rights for the naming context: DC=dshs,DC=wa,DC=lcl ......................... DOLGCOLY02 failed test NCSecDesc List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
