Another thing you might have is garbage data in AD that 2K replicates around fine but plugs up 2K3 DC, that should however show up in the eventlog, last time it happened to me it was a bad value on a printer attribute and the DC was throwing schema mismatch errors in the event log.
joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Svetlana Kouznetsova Sent: Saturday, June 05, 2004 11:12 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] AD Health check Thanks again to everyone, who replied. It sounds reasonable to do test in sysvol, like Joe said, for now and give it time till Monday. (you did mean - create a test file in sysvol directory on each domain controller, didn't you? :-/ ) Then certainly - the replication tests, Eric mentioned. I think, this should be first place to start for me. I have to agree with Joe that tests could show nothing, even where there is a problem indeed. For example, here everything seemed to run happily until the first W2K3 came into forest. Even repadmin didn't show anything wrong, but replication with W2K3 never happened since the first-time (dcpomo). Although it still looks ok between W2K DCs and even newly promoted (but W2K) DC picked it up fine. Actually, having read about what kind of horrors could be uncovered out there if start digging, I couldn't help, but thought for a moment that - perhaps, it is better to be in blissful ignorance of what's in there, since things pretend to work ok? (pity the thought has gone and now I've got to do that "seems-never-ending" work...[sigh]). Lana. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: 05 June 2004 06:51 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] AD Health check I absolutely agree that if replication is working you are probably in decent shape. As for you how to figure that out I am more of the drop something in and see if it gets around kind. I have been doing AD too long though and maybe my previous issues with repadmin and other tools that allegedly check replication haven't been the best. In a one off setting they tend to be ok and if you know you have an issue they are the best place to start. However I have seen cases (and I can't go into specifics off the top of my head nor even what year I saw the issues) where I have seen repadmin dumps of an entire domain seeming to be perfectly fine because there were no errors but then you notice that the last success was quite a while back. After all repadmin is simply a program, it can have issues like any program. If you create an object and it gets to all DCs, replication is certainly working irregardless of what any tools say. Ditto if an object doesn't get to all DCs. Dropping in a pebble and watching the ripple spread out is much more positive feedback system in my book. Any place that new object doesn't get to is a good place to start looking with repadmin. joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Fleischman Sent: Saturday, June 05, 2004 12:14 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] AD Health check I intentionally waited for the traffic on this thread to die down. :) If you're one who says "look I just want one test...the best one possible...to measure health" I'd argue that is replication. With one command you can understand replication in the forest: repadmin /showrepl * /csv And once you go forest functional level >=1 I also like repadmin /showutdvec a lot. What's cool about replication is the # of dependencies. If replication is working, it's probably the case that a lot of stuff is working. It's not 100% by any means, I don't mean to imply it is, nor is it a replacement for a comprehensive monitoring solution. But if you're looking for the 15 minutes a day health check, repadmin /showrepl is where it's at IMHO. :) ~Eric List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
