Skip to main content

Check Domain Controller Replication




Troubleshooting Domain Controllers is one of the challenges of Windows System Administrator.

But having the right tools and knowing how to use it would make life easier.

DCDiag is a handy tool to check Active Directory domain environment for the health of the servers.

Domain Controller Diagnostics Tool (dcdiag.exe) is a tool provided by Microsoft to aid in troubleshooting Domain Controllers.

Replication between domain controllers in an Active Directory environment is necessary to have data consistency.

If replication fails between DC's in an AD environment is a nightmare if cannot be resolved in a timely manner.

Here's an informative link to Technet website on how this awesome tool can do:


DCDiag.exe can check for replication errors, DNS issues and is able to check also security error configurations.

Security error configurations will cause replication to fails if delegation is not set properly.

Error below is shown when there is some replication errors between DC:
===============================================

   Testing server: Default-First-Site-Name\ServerName
      Starting test: Replications
         [Replications Check,ServerName] DsReplicaGetInfoW(PENDING_OPS) failed with error 8453,
         Win32 Error 8453.
         ......................... ServerName failed test Replications
===============================================

Such error will also be shown if DCDiag.exe is run against a DC without proper user account privileges.

If DCDiag is run on a remote PC and not on the DC itself, DCdiag needs an elevated command prompt with domain admin privileges.

If the user account used to run dcdiag does not have rights on the server it will result to an error.

Below is a link from Microsoft website on how to troubleshoot replication issues:


In Windows 2012 repadmin.exe command can be used to replicate between domain controllers.

This link provide examples on how to use repadmin:

http://technet.microsoft.com/en-us/library/cc742152.aspx

Replication can also be done using the graphical interface.

Open "Active Directory Sites and Services" via control panel and administrative tools.

Or simply type "dssite.msc" on command prompt.

Please check image below for the steps on how to do it using the graphical interface.



To use dcdiag.exe to check for any replication errors, open an elevated command prompt and type:

dcdiag /test:replications /s:server_name

If all is good and no errors,result will show "passed test Replications".

See sample output below:

===============================================

C:\>dcdiag /test:replications /s:server_name

Domain Controller Diagnosis

Performing initial setup:
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\server_name
      Starting test: Connectivity
         ......................... server_name passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\server_name
      Starting test: Replications
         ......................... server_name passed test Replications
===============================================

DCDiag can also test DNS of a Domain controller.

Command to test DNS:

dcdiag /test:dns /s:SERVER_NAME

DCDiag provides also an option to test all the servers on Site.

But this command should be run on a domain controller and not on a remote workstation.

On a domain controller open an elevated command prompt and type:

dcdiag /a

It will take time to display the results depends on how many DC's are there on the site.

Below is an example output for "dcdiag /a" command.

===============================================

C:\Users\administrator.SERVER_DC_NAME> dcdiag  /a

Directory Server Diagnosis

Performing initial setup:
   Trying to find home server...
   Home Server = SERVER_DC_NAME
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\SERVER_DC_NAME
      Starting test: Connectivity
         ......................... SERVER_DC_NAME passed test Connectivity
  

Doing primary tests

   Testing server: Default-First-Site-Name\SERVER_DC_NAME
      Starting test: Advertising
         ......................... SERVER_DC_NAME passed test Advertising
      Starting test: FrsEvent
         ......................... SERVER_DC_NAME passed test FrsEvent
      Starting test: DFSREvent
         ......................... SERVER_DC_NAME passed test DFSREvent
      Starting test: SysVolCheck
         ......................... SERVER_DC_NAME passed test SysVolCheck
      Starting test: KccEvent
         ......................... SERVER_DC_NAME passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... SERVER_DC_NAME passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... SERVER_DC_NAME passed test MachineAccount
      Starting test: NCSecDesc
         ......................... SERVER_DC_NAME passed test NCSecDesc
      Starting test: NetLogons
         ......................... SERVER_DC_NAME passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... SERVER_DC_NAME passed test ObjectsReplicated
      Starting test: Replications
         ......................... SERVER_DC_NAME passed test Replications
      Starting test: RidManager
         ......................... SERVER_DC_NAME passed test RidManager
      Starting test: Services
         ......................... SERVER_DC_NAME passed test Services
      Starting test: SystemLog
         ......................... SERVER_DC_NAME passed test SystemLog
      Starting test: VerifyReferences
         ......................... SERVER_DC_NAME passed test VerifyReferences 


   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation

   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation

   Running partition tests on : MY_WORLD_MY_DC
      Starting test: CheckSDRefDom
         ......................... MY_WORLD_MY_DC passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... MY_WORLD_MY_DC passed test CrossRefValidation

   Running enterprise tests on : MY_WORLD_MY_DC.local
      Starting test: LocatorCheck
         ......................... MY_WORLD_MY_DC.local passed test LocatorCheck
      Starting test: Intersite
         ......................... MY_WORLD_MY_DC.local passed test Intersite

===============================================


There other tests that can be done with dcdiag.exe tool.

Open a command prompt and type "dcdiag /?" (don't include quotes) to check other available parameters.

Cheers!!!  Till next time…

=================
Educational App for Android kids:

https://play.google.com/store/apps/details?id=com.xmultiplication

Comments

Popular posts from this blog

Notepad++ convert multiple lines to a single line and vice versa

Notepad++ is an awesome text editing tool, it can accept regex to process the text data. If the data is in a “.csv” format or comma separated values which is basically just a text file that can either be opened using a text editor, excel or even word. Notepad++ can process the contents of the file using regex. Example if the data has multiple rows or lines, and what is needed is to convert the whole lines of data into a single line. Notepad++ can easily do it using regex. However, if the data is on a single line and it needs to be converted into multiple lines or rows then regex can also be used for this case. Here’s an example on how to convert multiple rows or lines into a single line. Example data: Multiple rows, just a sample data. Press Ctrl+H, and  on "Find what" type: [\r\n]+ and on "Replace with" type with: , (white space) --white space is needed if need to have a space in between the data. See image below, "Regular Expression" must be se

WMIC get computer name

WMIC get computer model, manufacturer, computer name and  username. WMIC is a command-line tool and that can generate information about computer model, its manufacturer, its username and other informations depending on the parameters provided. Why would you need a command line tool if there’s a GUI to check? If you have 20 or 100 computers, or even more. It’s quite a big task just checking the GUI to check the computer model and username. If you have remote computers, you need to delegate someone in the remote office or location to check. Or you can just write a batch file or script to automate the task. Here’s the code below on how get computer model, manufacturer and the username. Open an elevated command prompt and type:     wmic computersystem get "Model","Manufacturer", "Name", "UserName" Just copy and paste the code above, the word “computersystem” does not need to be change to a computer name. A

How to check office version from command line

The are quite a few ways to check office version it can be done via registry, PowerShell or VBScript and of course, good old command line can also do it. Checking Windows office version whether it is Office 2010, Office, 2013, Office 2016 or other version is quite important to check compatibility of documents; or just a part of software inventory. For PowerShell this simple snippet can check the office version: $ol = New-Object -ComObject Excel.Application $ol . Version The command line option will tell you where’s the path located; the result will also tell whether office is 32-bit, 64-bit and of course the version of the office as well. Here’s the command that will check the office version and which program directory the file is located which will tell whether it’s 32-bit or 64-bit. Command to search for Excel.exe: DIR C:\ /s excel.exe | find   /i "Directory of"  Above command assumes that program files is on  C: drive. Sample Outpu