The directory isn't replicating so fixing FRS isn't going to solve that. When the OP said "Passwords, expiries, etc aren't being replicated" that's a gentle hint that the Domain partition ISN'T replicating. J
FRS probably isn't replicating either but these tools aren't going to help get directory replication going. Repadmin is your friend for diagnosing the directory replication. If they haven't replicated for the period mentioned elsewhere in this thread, it's time to step slowly back from the keyboard and do a thorough assessment of what is really going on before you even dream of letting them replicate directories or OP could very well find himself in a very untenable situation. AKA a Resume Generating Event. L From: MarvinC [mailto:[email protected]] Sent: Friday, March 13, 2009 7:22 AM To: NT System Admin Issues Subject: Re: Replication stopped, how to get going again? Then I concur with Bonnie. Also download the FRSDiag and Ultrasound tools from Microsoft. They're free and may be useful in helping to diagnose replication issues. The FRSDiag tools will allow you to force replication between two DC's and generate errors and information to help troubleshoot the issue. FRSDiag <http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=43cb658e-8553- 4de7-811a-562563eb5ebf&displaylang=en> UltraSound <http://www.microsoft.com/DOWNLOADS/details.aspx?familyid=61ACB9B9-C354- 4F98-A823-24CC0DA73B50&displaylang=en> NTDSUtil will help to transfer roles, if necessary. Check the forest and domain levels. Confirm the location of the FLSMO roles. gl.. On Fri, Mar 13, 2009 at 10:10 AM, Michael Reid <[email protected]> wrote: No Exchange servers and unfortunately and upgrade to solve this is out of the budget right now. I'll need to beat on this for a bit. On Fri, Mar 13, 2009 at 9:56 AM, MarvinC <[email protected]> wrote: > Consider upgrading the 2000 server to 2003. > Look at the forest and domain levels on both servers. Consider upgrading the > forest and domain levels to 2003. > Is the domain in native mode? > Check the FSMO roles as the schema master is only going to be on one of the > two servers. > > How many users, sites? Any exchange servers? > > gl.. > > On Fri, Mar 13, 2009 at 9:51 AM, Michael Reid <[email protected]> wrote: >> >> Yes, these servers have been working fine for a year or so. Then a >> month or so ago they got disconnected. Someone else dealt with that >> and they reset the computer account password and it started >> replicating again (didn't get more details than that). >> >> I found that link too, but since that it wasn't a recent addition I >> didn't follow up with it. >> >> >> On Fri, Mar 13, 2009 at 9:44 AM, David Lum <[email protected]> wrote: >> > Has replication ever worked? Is one of these a new DC? >> > >> > Have you Googled that error message? First link takes you here: >> > http://support.microsoft.com/kb/329860 >> > David Lum // SYSTEMS ENGINEER >> > NORTHWEST EVALUATION ASSOCIATION >> > (Desk) 971.222.1025 // (Cell) 503.267.9764 >> > -----Original Message----- >> > From: Michael Reid [mailto:[email protected]] >> > Sent: Friday, March 13, 2009 6:40 AM >> > To: NT System Admin Issues >> > Subject: Replication stopped, how to get going again? >> > >> > We have a 2003 and a 2000 server. Both are Domain controllers (or are >> > suppose to be). When I go into AD users and computers, the second >> > server shows up as a DC. When I go into the first server (2003) it >> > shows it as a member server. >> > >> > on the 2003 I get this error: 8453 Replication access was denied. >> > >> > Passwords, expiries, etc aren't being replicated. I was thinking of >> > just re adding the second server to the domain again by DCPROMO'ing >> > it. However, this wouldn't go well if it's the global catalogue server >> > I'm assuming. How could I tell which server was made first (the GC)? >> > >> > Any other suggestions? >> > >> > 'preciate it. >> > >> > Michael >> > >> > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> > >> > >> > >> > >> > >> > >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
