DC Replication failure..

[Chupa]

Hi to all please if anyone can help me on this
one:

situation:
1 DC(w2k) and 1 BDC(w2k3) all works fine with
latest SP's and fixups, nslookups, pings, net
view's etc..

Problem:
1) When I create a new or alter existing domain
accounts on DC /w2ksrv/ (or any object in AD)
changes will not appear on BDC until DBC is
restarted.

2)When I create a new or alter existing domain
accounts on BDC /w2k3srv/ (or any object in AD)
changes will not appear on DC never ever!
-exept in case that DC was turned off /not on the
net/ while creating account on BDC, then after DC
startsup it gets all info from BDC.

Error that i readed out with "directory
replication monitor" was:
"Replication failure: The reason: DSA operation is
unable to proceed because of a DNS lookup failure"
...on both machines nslookup works fine..

How to solve this very anoying issue?

I want to be able to open/alter accounts on both
DC and BDC!


Thanx 4 any concrete help!

 

[Richard G. Harper]

First there is no such thing as a PDC and BDC in Active Directory, so forget
that.

Second, your DNS settings are probably incorrect. There should be one DNS
server set up as the primary DNS server for the entire network and all other
computers should use only that server to resolve names. That DNS server
will need to be set up to use root hints or forwarders to resolve all
addresses outside the domain.

 

[Chupa]

First there is no such thing as a PDC and BDC in

Active Directory, so forget
that.

Ok BDC is now ADC, whatever.. DC is still DC.

Second, your DNS settings are probably
incorrect. There should be one DNS
server set up as the primary DNS server for the
entire network and all other
computers should use only that server to resolve
names. That DNS server
will need to be set up to use root hints or
forwarders to resolve all
addresses outside the domain.

DNS works fine, every ping and nslookup works
great for both intranet and names outside domain..

 

[Richard G. Harper]

It doesn't matter if ping et.al. are working correctly - if DNS is not
configured as I told you you will have replication problems.

And no, your AD controller terminology is still wrong. I point this out
only so that you won't confuse yourself or others when describing your AD
topology.

--