Question on Active Directory

[Maritime]

Hi
I am running two servers in the enviromentment, both running Active Directory services. However when a user account gets locked out, and I use Active Directory to unlock the Account on one Server, I also have to unlock it on the other server. Shouldn't AD automatically refelect the change on both servers? Is this an issue of how long windows takes to replicated the change from one server to another? How do I resolve this?

Thanks in advance.

 

[58sniper]

How long are you waiting? Both servers are DCs in the same forest and domain?

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[Maritime]

Both servers are DCs in the same Domain.
The senario is that a user will call and the account may be locked out on one server and not the other, or I guess depending on how long they take before they call, both servers. However based on what's been happening we have to check both servers each time we have to unlock an account, Or change a user passwords etc.

 

[ScottCr]

Are both servers in the same AD site?
Do you have only 2 DC's?
Which one is the PDC Emulator?

http://scottcross.blogspot.com

Windows and NT Admin.

 

[kmkeshav]

In most cases, changes made in one DC will be replicated to the other DCs immediately. If the DCs in question are in the same site, you should not feel any time lapse. Also, certain changes you make in one DC will be replicated to the other DCs on high priority, like account enable/disable and password changes.

Some times we used to have this kind of problem in our network. In this case we instruct the user to restart the workstation from which he/she tries to logon. This resolves the problem.

 

[Maritime]

Both servers are Domain Controllers in one domain e.g server1.local and server2.local

When the Servers were installed, they were configured in the typical first server, second server config. The first server was installed as the PDC and the 2nd as a BDC.

 

[58sniper]

Well, there is no such thing as a PDC and BDC in AD. Are there any errors in the event logs showing replication problems?

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[ScottCr]

Don't suppose you've tried replmon have you?

Take a look at the link below.

http://technet2.microsoft.com/WindowsServer/en/Library/691910f2-a6a7-4ced-984e-972aec2cbdd21033.mspx

also dcdiag is quite a useful tool.

http://www.microsoft.com/windows2000/techinfo/reskit/tools/new/dcdiag-o.asp

http://scottcross.blogspot.com

Windows and NT Admin.

 

[Maritime]

58sniper, thanks for the feedback. . .I know that the PDC and BDC configuration does not exist in W2K I was just trying to clarify the problem. I am seeing errors with the License Replication service. I am currently trying to correct that now.

Thanks

 

[Maritime]

Thanks Scott,

I'll take a look