Knowledge Consistency Checker (Urgent !!!)

[Teo Ee Seng]

Pls Help....

Event Type: Error
Event Source: NTDS KCC
Event Category: Knowledge Consistency Checker
Event ID: 1311
Date: 1/11/2005
Time: 8:45:48 AM
User: N/A
Computer: DOMAINS2
Description:
The Directory Service consistency checker has determined
that either (a) there is not enough physical connectivity
published via the Active Directory Sites and Services
Manager to create a spanning tree connecting all the
sites containing the Partition
DC=WPADMIN,DC=NCHEO,DC=com, or (b) replication cannot be
performed with one or more critical servers in order for
changes to propagate across all sites (most often due to
the servers being unreachable).

For (a), please use the Active Directory Sites and
Services Manager to do one of the following:
1. Publish sufficient site connectivity information such
that the system can infer a route by which this Partition
can reach this site. This option is preferred.
2. Add an ntdsConnection object to a Domain Controller
that contains the Partition DC=WPADMIN,DC=NCHEO,DC=com in
this site from a Domain Controller that contains the same
Partition in another site.

 

[Chris Hall]

You don't mention whether you're using windows 2000 or 2003. I've only used
2000, so here's some info on that. From my experience, a problem like this
is the result of dns problems. Make sure your DC(s) only point to the
internal dns.

How to verify an active directory installation:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;298143

Troubleshooting Event ID:1311:
http://support.microsoft.com/kb/214745/EN-US/


Setting up the domain name system for active directory:
http://support.microsoft.com/default.aspx?scid=kb;en-us;237675


How to Promote and Demote domain controllers in windows 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;238369

 

[Cary Shultz [A.D. MVP]]

Teo,

Check DNS and make sure that all of the records are there for all of the
Domain Controllers. There are a lot of them!

I would also suggest that you install the Support Tools from the Service
Pack CD Media or from the MS Site and run repadmin /showreps /v and repadmin
/showconn. This will show you what you currently have ( and you can then
figure out what you do not have ). Remember that AD Replication is based on
incoming connection objects. So, if you have two Domain Controllers you
would have a an incoming connection object from DC01 to DC02 and an incoming
connection object from DC02 to DC01. Also, remember that there are three
NCs that replicate: the Schema NC, the Configuration NC and the Domain NC.

I would first run, however, dcdiag /v and netdiag /v on all of the Domain
Controllers.

It looks like you are having problems with the Domain Partition.

Did you open up the Active Directory Sites and Services MMC ( or use
ADSIEdit.... ) and make sure that for each Domain Controller listed that
there is a child object ( NDTS Settings )? And that all of the Domain
Controllers are indeed listed?

HTH,

--
Cary W. Shultz
Roanoke, VA 24014
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com