How can I verify AD replication between two DCs works

active-directory domain-controller windows-server-2016

6,316

Solution 1

Have you tried DCDIAG? It has lots of tests including Checks for timely replication and any replication errors between domain controllers

Here is a link to Dcdiag information:

https://technet.microsoft.com/en-us/library/cc731968(v=ws.11).aspx

Solution 2

To ensure two DCs replicate with each other, you can follow the guide Forcing Replication.

You first want to ensure that both clean DCs replicate with each other.

Open Active Directory Sites and Services, navigate to your first DC and open the NTDS Settings.
You will probably see a connection to the old DC. Add a new connection for the new DC. Now force replication with your other DC.

Repeat the process for the other DC.
Now inspect replication results for your DCs:
```
repadmin /showrepl dc1
```

Solution 3

You can also use the graphical utility MS has and checks all AD Forest for replication issues.

https://www.microsoft.com/en-us/download/details.aspx?id=30005

Thank you

6,316

Author by

halra

Never forget: :w !sudo tee % Save a file in vim when you neglected to open the file with sudo but already made changes you don't want to lose. Ctrl+X,* Evaluate globbing on your current input on the bash command line. postfix flush Pump out the postfix queue on your backup MX after you've fixed the issue with your primary MX. git tag -l | xargs -n 1 git push --delete origin; git tag | xargs git tag -d Delete all tags from a git repo - remotely and locally. sudo apt-get purge $(for tag in "linux-image" "linux-headers"; do dpkg-query -W -f'${Package}\n' "$tag-[0-9]*.[0-9]*.[0-9]*" | sort -V | awk 'index($0,c){exit} //' c=$(uname -r | cut -d- -f1,2); done) Delete old kernels https://signup.microsoft.com/productkeystart Register new Office 365 product keys for an existing tenant.

Updated on September 18, 2022

Comments

halra over 1 year

We have a domain with 3 DCs in different networks and we want to decomission one of them.

However, I suspect that the two remaining DCs will not replicate properly between each other due to some network misconfiguration. So I want to ensure that, after I switch off the obsolete DC, the two remaining ones will replicate flawlessly between each other.

I can ping between the two DCs without any problems, but I suspect replication might be a different story.

When I issue repadmin /showrepl dc1, it will only show the status of the previous replications with the DC I want to remove. The safe DC is not listed.
Michael Brown almost 7 years

DCDIAG is much better ;)
Michael Brown almost 7 years

DcDiag is better :) I want the points!
halra almost 7 years

@MichaelBrown Running that actually pointed me towards an unrelated issue. So, definitely very helpful. Thanks for bringing it to my attention. I went with this approach while waiting for dcdiag to finish and this gave me a very direct way to achieve what I was trying to do.
halra almost 7 years

Neat tool. But it seems to expire pretty quick: i.imgur.com/otGlKja.png The link leads to the same page you linked.
Alexios Pappas almost 7 years

That is weird I use this tool for very long time but never seen it expiring, MS might changed something I will recheck it.
CC. almost 7 years

I run dcdiag /e after every patch. I wouldn't say it's a lifesaver, but I do sleep better when it comes up clean. Someday I'll script it to run automatically.
Alexios Pappas almost 7 years

Yes as I suspected MS changed something in order the old version to expire. I assume soon they will update the site with 1.1 version that now their link points still to the wrong one.