QuestionQ60

Deploy and manage AD DS

The network contains an Active Directory Domain Services (AD DS) forest with a hub site and 20 branch sites. The hub site hosts two writable domain controllers, named DC1 and DC2. Every branch site hosts one writable domain controller.

AD DS replication relies on manually created connection objects in a mesh topology.

DC2 repeatedly reports an NTDS Replication 2094 warning and a DCDIAG Active Directory Replication error 8461. DC1 has no replication backlog.

Name resolution, network connectivity, and authentication between sites succeed.

You need to reduce replication delays and resolve the replication warnings and errors. The solution must require minimal administrative effort.

What should you do?

Explanation

Error 8461 indicates that a replication operation was preempted by higher-priority replication work; excessive replication partners can contribute to persistent replication load and delay. Manually created or modified connection objects are not adjusted by the Knowledge Consistency Checker (KCC). Deleting the unnecessary manual mesh connections allows the KCC to generate and maintain the appropriate intra-site and intersite replication topology from the existing site links, reducing connection overhead and administrative maintenance.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!