Problem with account lockout synchronization

[A.P.J. Louwerse]

I have a windows 2000 network with 9 sites. Each site has a Domain
Controller. One site (the headquarters) has a second Domain Controller which
is a Exchange 2000 server as well.
When a useracount locks in one of the sites, replication immediatly occurs
and the lockout-status of the account on all sites is "Locked". When I
unlock the account on a site, replication also occurs immediatly and the
lockout-status changes on all Domain Controllers except the Exchange 2000
server !!!! The account remains locked on that Domain Controller. The user
can login, but can't open his/her mailbox. I have to unlock the account
again on the Exchange server.....

Who can help me with this problem ?

Arthur Louwerse.

 

[Tim Hines [MSFT]]

Account lockouts are in the "urgent replication" category but urgent
replication only occurs within a site. Urgent replication does not cross
site boundaries. When a user account is locked you should reset the users
account on a DC within that users site. Are you forcing replication between
sites after the account has been unlocked?

The links below discuss urgent replication


Search the following link for the word urgent to view the section on urgent
replication
http://www.microsoft.com/resources/...000/server/reskit/en-us/distsys/wsrvdsys.mspx

232690 Urgent Replication Triggers in Windows 2000
http://support.microsoft.com/?id=232690

--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.