Thanks for the quick response. Took me a while to get the needed reports, and first time using SkyDrive too. Link is: https://skydrive.live.com/redir?resid=40F0ECD5C2C22FEA!111 Please let me know if that is not working. Thank you, and have a great day!

Hi, I can see errors in dcdiagb1. There is a connectivity issue preventing the DC from replicating with the Site A domain controllers. KCC could not connect the sites and make sure that the site link bridging is disabled. Please make sure that the connectivity between sites is good and no necessary ports are blocked between sites. Try disabling firewall and check the status. Use port query to check the port status between DC's. http://social.technet.microsoft.com/wiki/contents/articles/584.active-directory-replication-over-firewalls.aspx Event ID 1311: Replication configuration does not reflect the ... technet.microsoft.com/en-us/library/cc740252(v=ws.10).aspx Previous discussion:http://social.technet.microsoft.com/Forums/en/winserverDS/thread/9a65c9f3-9f5e-4284-ad57-b838680cf0c5 http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/b038758c-466a-40f4-9823-9dc224a9c3d5 Regards, Rafic If you found this post helpful, please give it a "Helpful" vote. If it answered your question, remember to mark it as an "Answer". This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion in a test environment before implementing!

Hello, there is a connectivity problem between the sites, so please asssure that firewalls are configured according to: http://technet.microsoft.com/en-us/library/dd772723(WS.10).aspx adprep /rodcprep has not run, whcih result in an error in dcdiag, that can easy be cleaned with running the command, not requried but keeps the output clean. 100.16.0.1 is set on "SRV-PJ" as Forwarder, please remove it and use only the ISPs one. Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hi. The DNS Forwarder in B1 has been changed to that of the ISP. Firewalls have been temporarily reconfigured as per http://technet.microsoft.com/en-us/library/dd772723(WS.10).aspx Monitoring the system now. Can't believe that a mis-configured DNS forwarder can cause so many errors. Are there any other possibilities to this? Thank you.

Curiously, those events have stopped happening on B1. They are still appearing on server A1 non-stop. Server A2 and B1 are clear. Edit: After a restart on server A1, no more of the events appear there (as of 3mins after the restart). Will continue to monitor and notify if it appears again.

Good day. Scenario: A few months ago, I have installed a Windows 2008 r2 VM at my branch office. It encountered no problems joining our domain (connected to main site via IPSEC vpn). It was working fine for the last 3 months. Recently, I have been getting the above errors and warnings in Eventvwr: 1311, 1566, and 1865 regarding KCC replication. I have gone through and run the steps from the following links: http://blogs.technet.com/b/askds/archive/2008/10/31/troubleshooting-kcc-event-log-errors.aspx http://technet.microsoft.com/en-us/library/cc787129.aspx http://technet.microsoft.com/en-us/library/cc756648(WS.10).aspx and received no errors. dcdiag /test:connectivity on bridgehead servers of both sites show passed connectivity tests. repadmin tests (/kcc, /showrepl, /istg) show no errors and that my site configurations are alright. At this moment, the DCs on both sites are running fine (I think) despite these errors happening. However they are happening at a rapid pace (hundreds of times an hour), and I'm worried that it will lead to bigger problems in the long run. The other threads containing similar problems to mine are marked as "answered", but none of them have provided a solution that solves my issue. Can anyone please advise? Thank you, and have a great day!

Hello, "Firewalls have been temporarily reconfigured as per..." The firewall MUST be configured that way, otherwise AD will not work correct, so stick to that article for opening ports. And that seems to be the problem in your domain, not the forwarder.Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hello, for starting see http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/e5b78054-abc0-41bc-9972-13cb5b876327/ and if that doesn't help please upload the following files to Windows Sky Drive: ipconfig /all >c:\ipconfig.txt [all DCs] dcdiag /v /c /d /e /s:dcname >c:\dcdiag.txt repadmin /showrepl dc* /verbose /all /intersite >c:\repl.txt ["dc* is a place holder for the starting name of the DCs if they all begin the same (if more then one DC exists)] dnslint /ad /s "DCipaddress" (http://support.microsoft.com/kb/321045) ADREPLSTATUS: http://www.microsoft.com/en-us/download/details.aspx?id=30005 can also be exported to file. As the output will become large, DON'T post them into the thread, please use Windows Sky Drive(with open access!) http://explore.live.com/windows-live-skydrive and add the link from it here. Also the /e in dcdiag scans the complete forest, so better run it on COB. BTW: There is a Directory services specific forum http://social.technet.microsoft.com/Forums/en/winserverDS/threadsBest regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hi again. Now the reverse has happened: All 3 events (1311, 1566, 1865) are reappearing on server B1, but not present on server A1. Server A2 is clear. Why are they alternately appearing on A1 and B1? Please advise. Thank you.

As Meinolf already suggested, those errors appear due to port restrictions. You need to re validate and fix port issues first consulting your firewall team.I do not represent the organisation I work for, all the opinions expressed here are my own. This posting is provided "AS IS" with no warranties or guarantees and confers no rights. - .... .- -. -.- ... --..-- ... .- -. - --- ... ....

Hi. I understand what you are saying, that I need to open the ports in the firewall. I have done so. The events are hopping from DC to DC. This is the part that I do not understand, as the necessary ports have been configured on ALL firewalls. Last night, the problems stopped appearing in dc B1, and reappeared in dc A1 again, so this morning I have disabled the firewalls to A1 and B1, to see if the problem still persists. If it continues while the firewalls are disabled, what can I do?

Hello, without using the firewalls let them run some hours, at least 24 and then provide again anew complete uploaded logfile series.Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hi. Updated log files are here: https://skydrive.live.com/redir?resid=40F0ECD5C2C22FEA!135&authkey=!ABd6Bp6Lv1YgNb0 Thank you.

Hi, According to the log file, I find that there are a lot of error message regarding The RPC server is unavailable. Based on the current situation, please refer to the following Microsoft KB article for how to troubleshoot it: Troubleshooting RPC Endpoint Mapper errors using the Windows Server 2003 Support Tools from the product CD http://support.microsoft.com/kb/839880 Regards,Arthur Li TechNet Community Support

Hi, According to the log file, I find that there are a lot of error message regarding The RPC server is unavailable. Based on the current situation, please refer to the following Microsoft KB article for how to troubleshoot it: Troubleshooting RPC Endpoint Mapper errors using the Windows Server 2003 Support Tools from the product CD http://support.microsoft.com/kb/839880 Regards,Arthur Li TechNet Community Support

Hi. Another event has been added into the mix. Event 1862 is now being recorded on dc A1, no sign of event 1311, 1566, 1864 and 1865. Events 1311, 1566 and 1865 are now being recorded on dc A2. Previously these did not appear there. Events 1311, 1566, and 1865 are appearing on dc B1. Firewalls have been disabled for the past 2 days. A2, which was previously fine, is now having the same problem. What can be causing this? Thank you. @ Arthur... I have read through that article. It talks about an environment with Windows 2000 and/or Windows 2003 DCs. All 3 DCs in my environment are running on Windows 2008. Does it still apply?

Hello, please check also with http://blogs.technet.com/b/askds/archive/2008/10/31/troubleshooting-kcc-event-log-errors.aspx and http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/e5b78054-abc0-41bc-9972-13cb5b876327/ Additional upload a new set of logfiles, including ipconfig /all from ALL 3 DC/DNS servers.Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hello, please check also with http://blogs.technet.com/b/askds/archive/2008/10/31/troubleshooting-kcc-event-log-errors.aspx and http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/e5b78054-abc0-41bc-9972-13cb5b876327/ Additional upload a new set of logfiles, including ipconfig /all from ALL 3 DC/DNS servers.Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hi, Although the operation system editions are different, the troubleshooting steps are similar. Regards,Arthur Li TechNet Community Support

Hi all, New set of log files have been posted in the folder "New 31July2012". Link: https://skydrive.live.com/redir?resid=40F0ECD5C2C22FEA!155&authkey=!AF-fo6g-QRQNXvA

Hello, have you followed http://blogs.technet.com/b/askds/archive/2008/10/31/troubleshooting-kcc-event-log-errors.aspx and also http://technet.microsoft.com/en-us/library/cc740252(v=ws.10).aspx? You never answered this in detail? As the replication is still not working, how is the seteup in AD sites and services configured? Do you use self created connections or automatically created ones from the KCC?Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Meinolf, Sorry about that. I have followed both articles to find some idea of what went wrong, to no avail. Using LDP, I am able to Connect and Bind without any errors. I have included the failcache reports for both A1 and B1 in their respective skydrive folders. In AD Sites and Services, we are only using the default IP sitelink. I have created another one for testing only. The "Bridge All Site Links" option is ticked. Thank you.

Anyone?

I would suggest you to create a support case with MS.Please give credit to the contributor who really helped you with the issues.

Hello, what about the question about the server connections in AD sites and services? Are they automatically created or manual from yourself? And as we are stuck here is recommend also that you open a support case with Microsoft PSS, they will remote into your system and check details until the problem is solved. It is a one-time fee you have to pay, which is not that much for the result of a running domain. Sometimes in the forums it comes to the point where someone must take a look into the system.Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.