I currently manage a child domain in a forest. When trying to add a specific user account to any of my universal groups (security or distribution), replication fails. Let me clarify.
If I add this account to a group on DC1, it seems to work. However, when I try to force replication with DC2, I receive the following error:
The following error occurred during the attempt to synchronize naming context to sub.domain.com from domain controller DC1 to domain controller DC2: The object requested was not found, but an object with that key was found.
The operation will not continue.
I then receive Event IDs 1084 & 2108 on DC2. The object that is failing to replicate is the group that this account has been added to. I've tried all of the steps recommended by Event ID 2108.
If I remove the account from the group on DC1, everything goes back to normal.
I've tried adding this account to a group using DC2. The name resolves, but I get this error when I try to apply the change:
The following Active Directory error occurred: The directory service is busy.
DC1 is the PDC Emulation Master, RID Master, & is a global catalog server.
DC2 is the Infrastructure Master
The user account resides in the root domain of the forest. The groups that I'm attempting to add this account to are in the subdomain. This is the only account that is giving me problems, other accounts work fine. On the other end, DC2 seems to be the only domain controller having this issue. This account has been added to groups in other subdomains without any problems.
Any input is greatly appreciated!
Thanks!
Cory
