[ActiveDir] Application Partition Replication

[Myrick, Todd (NIH/CIT)]

Title: [ActiveDir] Remote DSL link

We started seeing strange problems with our Directory replication recently when bringing up new Windows 2003 DC in our Hub and Spoke Site design.  Our network has a lot of firewalls, domains, and business units, and we have managed to coordinate most of the firewalls in the business units to allow full communications to the central site.    The tech working on the problem says that MSFT says “Application Partitions” replicate differently than GCs and Domains.  Adding further “Application Partitions” can sometimes choose different connections to replicate their data across.  I don’t necessarily believe the tech at this point, so I ask you all.  Do application partitions replicate differently?  Is there a way to force them to use hub and spoke topology, and not try to replicate outside the site links?  Also do they use Preferred Bridge Head Servers as other partitions do?   Thanks,   Todd     Event Type:       Error Event Source:    NTDS KCC Event Category: Knowledge Consistency Checker Event ID:           1311 Date:                10/28/2004 Time:                4:18:45 PM User:                NT AUTHORITY\ANONYMOUS LOGON Computer:         Description: The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition.   Directory partition: DC=ForestDnsZones,DC=DHHSSECURITY,DC=LOCAL   There is insufficient site connectivity information in Active Directory Sites and Services for the KCC to create a spanning tree replication topology. Or, one or more domain controllers with this directory partition are unable to replicate the directory partition information. This is probably due to inaccessible domain controllers.   User Action Use Active Directory Sites and Services to perform one of the following actions: - Publish sufficient site connectivity information so that the KCC can determine a route by which this directory partition can reach this site. This is the preferred option. - Add a Connection object to a domain controller that contains the directory partition in this site from a domain controller that contains the same directory partition in another site.   If neither of the Active Directory Sites and Services tasks correct this condition, see previous events logged by the KCC that identify the inaccessible domain controllers.