DC01 is Windows Server2008R2, perform before seize
Name: log Directory Service
Source: Microsoft Windows - ActiveDirectory_DomainService
Date: 2021/5/11 8:25:42
Event ID: 2092
Task categories: copy
Levels: warning
Key words: classical
User: ANONYMOUS LOGON
Computer: DC01. *. Com
Description:
This server is the following case the role of the owner, but does not think that this role is effective, for partition contains case, since the server restart after the server has not been copied successfully with any of its partners, copying errors that this role is unable to verify,
Before correcting this situation, requirements and case the host connection operation will fail,
Case the roles: DC tyc, DC=com
User action:
1. The initial synchronization is an early replication system at boot time for the first time to complete, initial synchronization failure may explain why it's unable to verify the case the role, the process is introduced in knowledge base article 305476,
2. Copy this server has one or more partners, all replication partners are failure, use the command repadmin/showrepl shows replication errors, correct the pending errors, for example, there may be a IP connection, DNS name resolution and/or safety problems such as authentication, lead to cannot be copied successfully,
3. If all replication partners are closed (this kind of situation is rare, may be because of maintenance or disaster recovery), can force to verify the role, can be achieved by using the NTDSUTIL. EXE to capture the role to the same server to achieve this, you can according to the knowledge base article in http://support.microsoft.com in 255504 and 324801 to introduce the steps to complete this operation,
The following operations may be affected:
Architecture: the architecture of the forest will not be able to revise again,
Domain name: will be unable to add or delete domain, Lin from
PDC: will be unable to perform primary domain controller operations, such as the Active Directory domain services account group policy updates and password reset,
RID: could not account for new users, computer account or security group to distribute new security identifier,
Structure: if delete or rename the target object, the cross domain reference (such as general group membership) will not be updated correctly,
Event Xml:
DC tyc DC com
