AD Replication - Replicate AD single Objects between the Domain Controller's

-
                           Replicate AD single Objects between the Domain Controller's
Hello Folks,

Today I had a request to investigate a critical issue related to objects (attributes) not replicated in Active Directory between the two Domain Controller's - HQ and Branch Office that are connected over the WAN link.

To save the Network bandwidth and core services, AD replication schedule is set to replicated every 8 hours (Too high and don't ask me why it is 8 hours - Face palm moment)  and this was the cause that the objects were not reflected in the branch site.

I came across this cool command that is supported in Windows 2012R2, Repadmin command-line tool includes this sweet little feature that we can use to replicate data between the two domain controllers even if it's outside the schedule.

This is also useful when troubleshooting replication problems between the sites.

The switch is "repadmin /replsingleobj"  (In the previous edition of Windows Servers the command was replsingleobject however this has been shortened to replsingleobj).

Complete command:

C:\Repadmin /replsingleobj SourceDC DestinationDC ObjectDN

Object Distinguish Name follows the LDAP DN rules. Example is User Name JamesBovik created in HR OU of Corp.Arkah.com Domain will be DN: CN=JamesBovik,OU=HR,DC=Corp,DC=Arkah,DC=com.

Note if the DN has any spaces in it, please include usual quotes.

Example with the syntax:

repadmin /replsingleobj DC1.corp.arkah.com DC2.corp.arkah.com CN=JamesBovik,OU=HR,DC=Corp,DC=Arkah,DC=com.

Hope this has help anyone that has this sort of setup to replicate single object in the Domain.

Have a good day!



Comments

Post a Comment

Popular posts from this blog

Windows 11 22H2 RDP disconnects and freezes randomly

-
Image
Namaste Everyone. I have been following and reading many forums with the similar issue of RDP session freezing or either getting disconnected frequently. Logs have not proved anything exceptional or drastic changes in the environment, however I was able to test this in my lab and have traced some Network Logs via the Wireshark and could see retransmision packets between the client and the server. This all started after the update to Windows 11 22H2. The resolution is to either rollback the 22H2 on the client or apply this registry or ADMX setting via the Group Policy. My theory is that after looking at the logs in my client is that the problem is due to the fact that the RDS connection is trying to connect over UDP and is not trying to connect over TCP if the UDP fails or gets block for some reason. So either you can manually set the registry in the client by following the below step: Browse to the below Registry Path with administrator account: HKLM\SOFTWARE\Policies\Microsoft\Win...
Read more

Certification - 70-533

-
Welcome Azure Techies!! In this blog I am going to share some tips and information on my personal experience in earning the Microsoft Specialist Azure Certification, specifically "Exam 70-533 Implementing Microsoft Azure Infrastructure Solutions". This was a great experience overall in achieving "Microsoft Specialist Certification", my journey started on the back of a several projects I was involved within the company and inclined to understand the in and out of the Azure Mechanics. At the time of writing this article Microsoft  exam measures your ability to accomplish the technical tasks listed below, and from March 2016 onward the Skills Measured for this exam will change and include some updates, Please refer the link for more information on the changes. Link I would suggest and recommend to keep checking this page regularly for the updates from Microsoft. Link. There are many helpful articles and guidance from the Pro's in earning the Certi...
Read more

Windows 2019 Server Change TimeZone error "Unable to continue" You Do not have permissions to perform this task.

-
Image
 Namaste everyone, During the install of a new Azure AD Connect software I was provided a brand new Windows 2019 Server Datacenter Edition and this was fully patched and updated with the Security patches. There were no Group Policies with exception of the Domain Policy and a SCCM Server Policy for patching. I noticed the time was out of sync an hour as the server was located in the different region and all other servers were set to local region settings. So the usual step is to try and change the date and time from the Control Panel, however when I tried to update the time I received a message that I cannot change the time. "Unable to continue" You Do not have permissions to perform this task. Please contact your administrator for help. The simple fix to use the Get-Timezone and Set-Timezone PowerShell commands,  Get-TimeZone -ListAvailable | where StandardName -like "*GM*"    ( This command will extract the specific Timezone with the words GM in the StandardName, y...
Read more