Recommended Posts

I am having a hard time Replicating a site in AD. It gives me an "Access Denied" error when I run Replmon. I also did a DCDIAG test and got these results. The site is called Woburn. Any insight would be huge.

C:\Program Files\Support Tools>dcdiag

Domain Controller Diagnosis

Performing initial setup:

Done gathering initial info.

Doing initial required tests

Testing server: Horsham\HQDC01

Starting test: Connectivity

......................... HQDC01 passed test Connectivity

Doing primary tests

Testing server: Horsham\HQDC01

Starting test: Replications

[Replications Check,HQDC01] A recent replication attempt failed:

From AURORA to HQDC01

Naming Context: DC=ForestDnsZones,DC=CORPORATE,DC=LOCAL

The replication generated an error (1256):

The remote system is not available. For information about network tr

oubleshooting, see Windows Help.

The failure occurred at 2005-10-03 12:45:58.

The last success occurred at 2005-09-23 04:45:48.

496 failures have occurred since the last success.

[Replications Check,HQDC01] A recent replication attempt failed:

From AURORA to HQDC01

Naming Context: DC=DomainDnsZones,DC=CORPORATE,DC=LOCAL

The replication generated an error (1256):

The remote system is not available. For information about network tr

oubleshooting, see Windows Help.

The failure occurred at 2005-10-03 12:45:58.

The last success occurred at 2005-09-23 04:45:48.

496 failures have occurred since the last success.

[Replications Check,HQDC01] A recent replication attempt failed:

From AURORA to HQDC01

Naming Context: CN=Schema,CN=Configuration,DC=CORPORATE,DC=LOCAL

The replication generated an error (1722):

The RPC server is unavailable.

The failure occurred at 2005-10-03 12:46:47.

The last success occurred at 2005-09-23 04:45:46.

496 failures have occurred since the last success.

^C

C:\Program Files\Support Tools>dcdiag /test:securityerror

Test not found. Please re-enter a valid test name.

C:\Program Files\Support Tools>dcdiag /test:checksecurityerror

Domain Controller Diagnosis

Performing initial setup:

Done gathering initial info.

Doing initial required tests

Testing server: Horsham\HQDC01

Starting test: Connectivity

......................... HQDC01 passed test Connectivity

Doing primary tests

Testing server: Horsham\HQDC01

Starting test: CheckSecurityError

Source DC AURORA has possible security error (1722). Diagnosing...

No KDC found for domain CORPORATE.LOCAL in site AURORA (1355, NUL

L)

[AURORA] Unable to contact this DC. Cannot continue diagnosing e

rrors with this DC.

[LINDENWOLD] DsBindWithSpnEx() failed with error 1722,

The RPC server is unavailable..

Ignoring DC LINDENWOLD in the convergence test of object CN=HQDC01,OU=D

omain Controllers,DC=CORPORATE,DC=LOCAL, because we cannot connect!

[AURORA] DsBindWithSpnEx() failed with error 1722,

The RPC server is unavailable..

Ignoring DC AURORA in the convergence test of object CN=HQDC01,OU=Domai

n Controllers,DC=CORPORATE,DC=LOCAL, because we cannot connect!

Authoritative attribute dBCSPwd on HQDC02 (writeable)

usnLocalChange = 14581070

LastOriginatingDsa = HQDC01

usnOriginatingChange = 51810650

timeLastOriginatingChange = 2005-09-28 23:32:51

VersionLastOriginatingChange = 15

Out-of-date attribute dBCSPwd on WOBURN (writeable)

usnLocalChange = 11154431

LastOriginatingDsa = HQDC01

usnOriginatingChange = 49944195

timeLastOriginatingChange = 2005-08-29 16:32:50

VersionLastOriginatingChange = 14

Authoritative attribute lmPwdHistory on MAITLAND (writeable)

usnLocalChange = 7682906

LastOriginatingDsa = HQDC01

usnOriginatingChange = 51810650

timeLastOriginatingChange = 2005-09-28 23:32:51

VersionLastOriginatingChange = 15

Out-of-date attribute lmPwdHistory on WOBURN (writeable)

usnLocalChange = 11154431

LastOriginatingDsa = HQDC01

usnOriginatingChange = 49944195

timeLastOriginatingChange = 2005-08-29 16:32:50

VersionLastOriginatingChange = 14

Authoritative attribute ntPwdHistory on HAVERHILL (writeable)

usnLocalChange = 120475

LastOriginatingDsa = HQDC01

usnOriginatingChange = 51810650

timeLastOriginatingChange = 2005-09-28 23:32:51

VersionLastOriginatingChange = 15

Out-of-date attribute ntPwdHistory on WOBURN (writeable)

usnLocalChange = 11154431

LastOriginatingDsa = HQDC01

usnOriginatingChange = 49944195

timeLastOriginatingChange = 2005-08-29 16:32:50

VersionLastOriginatingChange = 14

Authoritative attribute pwdLastSet on WELLESLEY (writeable)

usnLocalChange = 2486866

LastOriginatingDsa = HQDC01

usnOriginatingChange = 51810650

timeLastOriginatingChange = 2005-09-28 23:32:51

VersionLastOriginatingChange = 15

Out-of-date attribute pwdLastSet on WOBURN (writeable)

usnLocalChange = 11154431

LastOriginatingDsa = HQDC01

usnOriginatingChange = 49944195

timeLastOriginatingChange = 2005-08-29 16:32:50

VersionLastOriginatingChange = 14

Authoritative attribute supplementalCredentials on PORTSMOUTH (write

able)

usnLocalChange = 8326916

LastOriginatingDsa = HQDC01

usnOriginatingChange = 51810651

timeLastOriginatingChange = 2005-09-28 23:32:51

VersionLastOriginatingChange = 14

Out-of-date attribute supplementalCredentials on WOBURN (writeable)

usnLocalChange = 11154431

LastOriginatingDsa = HQDC01

usnOriginatingChange = 49944196

timeLastOriginatingChange = 2005-08-29 16:32:50

VersionLastOriginatingChange = 13

Authoritative attribute unicodePwd on HOWELL (writeable)

usnLocalChange = 487272

LastOriginatingDsa = HQDC01

usnOriginatingChange = 51810650

timeLastOriginatingChange = 2005-09-28 23:32:51

VersionLastOriginatingChange = 15

Out-of-date attribute unicodePwd on WOBURN (writeable)

usnLocalChange = 11154431

LastOriginatingDsa = HQDC01

usnOriginatingChange = 49944195

timeLastOriginatingChange = 2005-08-29 16:32:50

VersionLastOriginatingChange = 14

Unable to verify the convergence of this machine account (CN=HQDC01,OU=

Domain Controllers,DC=CORPORATE,DC=LOCAL) on this domain (DC=CORPORATE,DC=LOCAL)

. Does the machine account password need reseting?

......................... HQDC01 failed test CheckSecurityError

Running partition tests on : ForestDnsZones

Running partition tests on : DomainDnsZones

Running partition tests on : Schema

Running partition tests on : Configuration

Running partition tests on : CORPORATE

Running enterprise tests on : CORPORATE.LOCAL

Ty,

Tommy

Link to comment
https://www.neowin.net/forum/topic/380337-replication-issues/
Share on other sites

Try to ping from your "failing" DC to the one that has the "PDC-role" (usually the first DC in your AD has this role). Make sure you can ping it using the DNS name and not just the IP address.

What kind of connectivity do you have between the sites? Make sure no firewalls are blocking traffic that they shouldn't

Try to ping from your "failing" DC to the one that has the "PDC-role" (usually the first DC in your AD has this role).  Make sure you can ping it using the DNS name and not just the IP address.

What kind of connectivity do you have between the sites?  Make sure no firewalls are blocking traffic that they shouldn't

586616269[/snapback]

I can ping fine and it is a VPN tunnel. I have many sites setup like this but this is the only one giving me trouble. In my post it says Out-of-date passwords. I think this relivant. I ran replmon and got an error from this site saying access denied.

  • 11 months later...

You must reset security channel.

First disable Kerberos KDC and restart DC.Then use

netdom resetpwd /server:server_name /userd:domain_name\administrator /passwordd:administrator_password

wait 10 mins and check replication.It must be OK.Then enable Kerberos KDC and restart dc.That's all

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Same, never saw it on Android or iOS. Guess only some people got it *shrugs*
    • Anthropic pulls Fable 5 and Mythos 5 after US export control order by Pradeep Viswanathan In April this year, Anthropic launched the Claude Mythos Preview frontier model with state-of-the-art cyber and coding capabilities for a select set of companies around the world. After preparing appropriate guardrails, early this week, Anthropic launched Claude Fable 5 and Mythos 5, its most capable AI models. Claude Fable 5 is for general users and comes with strict safeguards, while Mythos 5 is designed with fewer safeguards for cybersecurity and biology use cases. Today, Anthropic abruptly suspended access to its Fable 5 and Mythos 5 AI models for all customers after receiving an export control directive from the US government. The company received the directive from the government today at 5:21 p.m. ET, and the received letter did not provide any details regarding the national security concern. Anthropic understands that the government became aware of a method to bypass, or “jailbreak,” Fable 5, which might be the reason behind the directive. The order was issued under national security authorities and requires the company to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether they are inside or outside the United States. The restriction also applies to foreign national employees working at Anthropic. As a result, the company has disabled both models for all customers to ensure compliance. Access to previous Anthropic models like Opus and Sonnet is not affected by this government order. The company highlighted that it had developed strong safeguards to reduce the possibility that Fable is misused for tasks related to cybersecurity. In fact, many developers are complaining that the safeguards are going overboard. Additionally, the company worked with the US government, the UK AISI, multiple private third-party organizations, and internal teams to red-team Fable’s safeguards for thousands of hours. Finally, Anthropic noted that no testers have yet been able to find a universal jailbreak on Fable 5. As expected, Anthropic disagrees that a narrow potential jailbreak should lead to the recall of a commercial model used by hundreds of millions of people. It warned that applying this standard across the AI industry could effectively halt new frontier model deployments. Anthropic concluded by mentioning that it is working to restore access to Fable 5 and Mythos 5 as soon as possible and plans to share more details within the next 24 hours.
    • Brave Browser 1.91.172 is out.
    • Any Video Converter Free 9.2.3 by Razvan Serea Any Video Converter is an All-in-One video converting tool with an easy-to-use graphical interface, fast converting speed and excellent video quality. Any Video Converter supports all popular video formats and converts your videos to different video formats including MP4, MOV, MKV, M2TS, M4V, MPEG, AVI, WMV, ASF, OGV, WEBM, and more. It supports converting videos to customized percent (50%, 100%, 200%, and more) or resolution (480p, 720p, 1080p, 4K, and more); It supports encoding videos into x264, x265, h263p, xvid, mpeg, wmv, and more. Any Video Converter Free key features: Compatible with Windows 11/10/8.1/8/7 (32-64bit) User interface are available in 14 languages Convert all kinds of video formats including high-definition videos Extract audio from any videos and save as MP3/WMA for your mp3 player Take snapshot from any videos and build your own picture collection Support high-definition for both input and output Batch add videos from hard drive and batch convert Customize output parameters completely as you like Manage your output videos files by group or output profile Merge several video files into a single and long one Clip a video into segments Free Audio Filter: Adjust audio volume and add audio effects Crop frame size to remove black bars and retain what you want only Adjust the brightness, contrast, saturation Rotate or flip or add noise/sharpen effects Produce output video with subtitles of your own dialogue and much, much more... Any Video Converter Free 9.2.3 changelog: Fixed video download engine auto-update failures. Added custom speed control support in the speed change tool. Added support for downloading YouTube AI-generated subtitles. Added support for preserving original audio stream in the format convert tool (e.g., Dolby Atmos, DTS:X). Fixed other bugs and improved overall performance. Download: Any Video Converter Free 9.2.3 | 7.6 MB (Freeware) View: Any Video Converter Free Home Page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Not sure what country you’re in but in many countries you can absolutely jail the sellers behind businesses… in fact I’d say in most countries you can do that
  • Recent Achievements

    • Contributor
      MarkHughes4096 went up a rank
      Contributor
    • Dedicated
      jordanspringer earned a badge
      Dedicated
    • Rookie
      Rimplesnort went up a rank
      Rookie
    • One Year In
      Markus94287 earned a badge
      One Year In
    • One Month Later
      Markus94287 earned a badge
      One Month Later
  • Popular Contributors

    1. 1
      +primortal
      505
    2. 2
      +Edouard
      176
    3. 3
      PsYcHoKiLLa
      148
    4. 4
      ATLien_0
      92
    5. 5
      Steven P.
      79
  • Tell a friend

    Love Neowin? Tell a friend!