Error 1083 in event viewer : need advice

[Romain Pelissier]

Hi,
I hope someone can help with this and I am pretty sure that this kind of
error happen to someone else.
Here is the story :
I have 4 servers : let call them srv1,srv2,srv3,srv4.
srv1 is the master, the domain controller and the master of my windows 2000
universe, it also has sms 2003 SP1 beta (need the beta because I need to
have the default web site other than on port 80 because of epolicy
orchestrator), and epolicy orchestrator
srv2 is our mail server with exchange 2003 and groupshield 5.5, domain
member
srv3 is a file server, domain member
srv4 is a remote server in another office, domain member.

I have the 1083 error in the event viewer, meaning that an item could not be
updated from a replication partner (between srv1 and srv2). Strange thing is
that the item is the administrator account :
Replication warning: The directory is busy. It couldn't update object
CN=Administrator,CN=Users,DC=sqliaison,DC=com with changes made by directory
bbd69e83-8165-4d47-b18e-8b5609c584af._msdcs.sqliaison.com. Will try again
later.

I have check several troubleshooting ways like :

place the account in another OU
verifying using LDP if there is no duplicate objects

But nothing is relevant here, meaning that there is no replication errors
when trying to use the active directory replication monitor and the kcc
check is ok too.
So I try to find why and use the command line utility :
repadmin /showmeta "cn=administrator,cn=users,dc=mydomain,dc=com' srv1
and try it also on :
repadmin /showmeta "cn=administrator,cn=users,dc=mydomain,dc=com' srv2

I find one difference :
All versions are the same for the object, exept :
for srv1 :
Loc.USN Originating DSA Org.USN
Org.Time/Date Ver Attribute
1279952 Default-First-Site-Name\srv1 1279952
2004-05-19 18:11.55 5 cn
for srv2
Loc.USN Originating DSA Org.USN
Org.Time/Date Ver Attribute
8822 Default-First-Site-Name\srv2 8822
2004-02-02 18:16.57 1 cn

So, the version is not the same for the 2 servers... Another strange thing
is that if I make a change using AD users and computers to the administrator
account (like the tel number) the srv1 has the change too !

If anyone can tell me how I can resolve that ...
I don't know if I have to modify manually the version number or what I need
to check to know why or what make the difference of the version between the
two servers...

Any help will be VERY appreciated !
please send a reply no (e-mail address removed) (remove _nospam)

 

[Guest]

Romain,

To troubleshoot this issue, I would recommend you to follow the knowledge
base article mentioned below:

http://support.microsoft.com/?id=296714

Srikanth N
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Romain Pelissier]

Hi,
Thanks for your answer.
I saw the knowledge base article but I already try those things :

the administrator password still the same
there is no duplicate objects with the name administrator

I did a repadmin /sync and still monitor if the error occurs again ...

Anyway, if I add/modify one of the attributes of the object administrator
(like the tel number) the ID on SRV2 is updated but not on the other servers
(SRV1,SRV3,SRV4) ... and I really don't know why.

The only service that use the administator account is the active directory
connector for exchange 2003.

Maybe I can update the version number by hand ? But still son't know how ...
and maybe it is not a goog id. For an unknow reason the srv2 server display
no errors but has not the same version number for the change applied to the
object administrator.

So, if you have any other suggestions ....

 

[Adrian Grigorof]

Have you seen these comments
http://www.eventid.net/display.asp?eventid=1083&eventno=919&source=NTDS Replication&phase=1 ?
--
Regards,

Adrian Grigorof
www.eventid.net
ElUnDump - Freeware for monitoring Windows event logs -
www.altairtech.ca/elundump

 

[Guest]

Romain,

I would suggest that you should demote/promote the other three DCs and
check if the problem continues.

Srikanth N
This posting is provided "AS IS" with no warranties, and confers no rights.