Domain Controller Error 1311
Contents |
(עברית)المملكة العربية السعودية (العربية)ไทย (ไทย)대한민국 (한국어)中华人民共和国 (中文)台灣 (中文)日本 (日本語) HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums Ask a question Quick access Forums home the knowledge consistency checker (kcc) was unable to form a complete spanning tree network topology Browse forums users FAQ Search related threads Remove event id 1311 server 2008 r2 From My Forums Answered by: AD Replication Issues - Event ID's 1865, 1311, 1566 publish sufficient site connectivity information so that the kcc can determine a route Windows Server > Directory Services Question 0 Sign in to vote I have a small domain: joneswaldo.com I have 3 domain
Event Id 1865 And 1311
controllers in main office: JWPDC, JWCMS, JWISP I have 4 domain controllers offsite connected over IPSEC VPN tunnels back to main office: JWSTG, JWPC, JWCM, and JWUC One of my domain controllers offsite JWCM is having AD Replication issues, and I cannot browse to the active directory global catalog is located in which of the following places? any other domain controller from JWCM with UNC when I do I get a Logon Failure: the target account name is incorrect. If I stop the Kerberos Key Distribution Center Service and set it to manual, reboot the server I can browse the other DC's. HELP! Directory Service Logs: EVENT 1865: The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topology. As a result, the following list of sites cannot be reached from the local site. Sites: CN=StGeorge,CN=Sites,CN=Configuration,DC=joneswaldo,DC=com CN=ParkCity,CN=Sites,CN=Configuration,DC=joneswaldo,DC=com CN=SaltLakeCity,CN=Sites,CN=Configuration,DC=joneswaldo,DC=com CN=UtahCounty,CN=Sites,CN=Configuration,DC=joneswaldo,DC=com EVENT 1311: The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition. Directory partition: CN=Configuration,DC=joneswaldo,DC=com There is insufficient site connectivity information in Active Directory Sites and Services for the KCC to create a spanning tree replication topology. Or, one
(PFE) Platforms Ask the Core Team Cloud Platform Blogs Hybrid Cloud Microsoft Azure Building Clouds Datacenter Management event id 1311 source activedirectory_domainservice Hybrid Cloud Operations Management Suite (OMS) System Center Virtual Machine Manager
Event Id 1566 Knowledge Consistency Checker
System Center Service Manager System Center Operations Manager System Center Orchestrator System Center Data Protection Manager Client
Dcdiag Kccevent
Management System Center Configuration Manager Configuration Manager Team System Center Service Manager Malware Protection Center Microsoft Intune Server Update Services Enterprise Mobility Virtualization, VDI & Remote Desktop Virtualization https://social.technet.microsoft.com/Forums/windowsserver/en-US/9a65c9f3-9f5e-4284-ad57-b838680cf0c5/ad-replication-issues-event-ids-1865-1311-1566?forum=winserverDS Team Ben Armstrong's Virtualization Remote Desktop Services Ask the Core Team on Hyper-V Enterprise Mobility File & Storage & High Availability File & Storage Ask the Core Team on Failover Cluster Clustering & High Availability Windows Server Management PowerShell Hey Scripting Guy (PowerShell) Networking Identity, Access & Security Datacenter and Private Cloud Security Active Directory Enterprise https://blogs.technet.microsoft.com/askds/2008/10/31/troubleshooting-kcc-event-log-errors/ Mobility Ask Directory Services Ask the Directory Services Team Microsoft's official enterprise support blog for AD DS and more Troubleshooting KCC Event Log Errors ★★★★★★★★★★★★★★★ October 31, 2008June 26, 2015 by NedPyle [MSFT] // 4 Comments 0 0 0 My name is David Everett and I’m a Support Escalation Engineer on the Directory Services Support team. I’m going to discuss a recent trend I’ve seen where Active Directory Replication appears to be fine but one DC only in one (or more) sites begins logging Knowledge Consistency Checker (KCC) Warning and Error events in the Directory Service event log. I included sample events below. For those not familiar with the KCC, it is a distributed application that runs on every domain controller. The KCC is responsible for creating the connections between domain controllers and collectively forms the replication topology. The KCC uses Active Directory data to determine where (from what source domain controller to what destination domain controller) to create these connections. In some cases these errors are
for Help Receive Real-Time Help Create a Freelance Project Hire for a Full Time Job Ways to Get Help Ask a Question Ask for Help Receive Real-Time Help Create a Freelance Project Hire for a Full Time Job Ways to Get https://www.experts-exchange.com/questions/27620012/NTDS-KCC-event-1865-1311-and-1566-every-15-minutes.html Help Expand Search Submit Close Search Login Join Today Products BackProducts Gigs Live Careers Vendor Services Groups Website Testing Store Headlines Experts Exchange > Questions > NTDS KCC event 1865, 1311 and 1566 every 15 minutes https://4sysops.com/archives/if-domain-controller-replication-is-not-working/ Want to Advertise Here? Solved NTDS KCC event 1865, 1311 and 1566 every 15 minutes Posted on 2012-03-06 Windows Server 2003 Windows Networking Active Directory 1 Verified Solution 14 Comments 3,739 Views Last Modified: 2012-03-09 event id We have a forest level root domain controller DC1 with backup DC2. We have a child domain controllers where users authenticate at various branch offices UC1-UC5. UC1 has 1865, 1311 and 1566 every 15 minutes along with DC1 and DC2. Now DC1 (the primary root domain controller also has 1925. Any thoughts on how to resolve this? 0 Question by:bergquistcompany Facebook Twitter LinkedIn Google LVL 26 Best Solution byLeon Fester So knowledge consistency checker one of your DC's stopped syncing and now you've got lingering objects. You can get around this issue, quiet easily by enabling loose replication. I personally don't like that option, because you'll Go to Solution 14 Comments LVL 26 Overall: Level 26 Windows Server 2003 17 Active Directory 15 Windows Networking 4 Message Expert Comment by:Leon Fester2012-03-07 Thoses events indicate some issues with replication. Replication is highly dependant on DNS working correctly. But replication can also fail if your DC's are tombstoned. You can get some direct help by Googling "KCC events every 15 minutes" But I would start with a health check on your servers by running a DCDIAG on your DC's and post the results. Check that DNS is working correctly. Next run repadmin /showrepl on each DC to check when last it attempted inbound replication. Post the results and we can help you further. 0 Message Author Comment by:bergquistcompany2012-03-07 Here is from the user domain controller UC1. It should pass DNS to DC1 and it's backup DC2. Given it is the user domain controller it holds the most accurate information. Microsoft Windows [Version 5.2.3790] (C) Copyright 1985-2003 Microsoft Corp. C:\Documents and Settings\Administrator.UC1>dcdiag Domain Controller Diagnosis Performing initial setup: Done gathering initial info. Doing initial required t
Register RSS If domain controller replication is not workingHome Blog If domain controller replication is not working4sysops - The online community for SysAdmins and DevOps Jim Jones Fri, Aug 23 2013Fri, Aug 23 2013 active directory 5 I’ve recently found myself working on an interesting issue where I was working to spin up a new domain controller in a brand new site, promotion went just fine but the initial replication failed.AboutLatest PostsFollow meJim JonesJim Jones has been a SysAdmin for 15 years and is currently working as a Sr. Network Administrator in West Virginia, USA. Honored to be elected a vExpert and Veeam Vanguard, Jim can be found on Twitter @k00laidIT and at his personal site, koolaid.info. Follow meLatest posts by Jim Jones (see all) Removing a corrupted Canon print driver - Fri, Apr 8 2016 VMware vSphere licensing update 2016 - No love for the little guy - Fri, Mar 25 2016 Veeam releases free Endpoint Backup 1.5 - Fri, Mar 18 2016 Contents of this articleProblem descriptionProblem troubleshootingProblem solutionWhat initially tipped me off that there was an issue is that while the DNS Server service was running, when attempting to access to the console it would say the DNS server wasn’t running. Further accessing any of the Active Directory management tools was exceptionally sluggish and neither the sysvol or netlogon shares were created on the new DC.After working this myself for a while I ended up contacting Microsoft support and eventually found the issue to be one which doesn’t have a publicly accessible knowledge base article for but evidently is documented internally. In this article I’m going to outline the specifics of the issue, the commands that I found helpful in troubleshooting the issue, and finally what ultimately fixed the issue.Problem description ^A good starting point is probably to be able to visualize the network, so please refer to the network diagram above. In my situation all domain controllers are meshed with replication connections to each other. Field office 3 is a brand new location so a new site and subnet were setup first and then a Windows Server 2008 R2 server was spun up in that subnet. After installing the Active Directory Service role and running dcpromo, which had zero errors through the process, is when I began to see the issues described above. Further inspection showed that no site connectors were created on the server in AD Sites and Services. The following errors also showed up repeatedly in the event log:ActiveDirectory_DomainService 1865 “The Knowledge Consistency Checker (KCC) was unable to form a complete spanning tree network topo