Shulou(Shulou.com)06/03 Report--

AD cannot be copied. When copying manually, the main name of the target is incorrect.

1. Disable Kerberos server on the problem domain,

2. Run netdom resetpwd /server: server name/userd: domain name\administrator /passwordd: secret

3. Copy prompt again exceeds tombstone survival time

4. Modify the registry HKLM\System\CurrentControlSet\Services\NTDS\Parameters to add the DWord value Allow Replication With Divergent and Corrupt Partner, which is set to 1.

The target server is currently rejecting the replication request.

6. Enable Kerberos service restart

7. Automatic synchronization succeeded

8. Registry restored to 0

======================================================================

The wrong log is

Too much time has passed since this computer was last copied from the named source computer. The replication interval with this source has exceeded the tombstone lifetime. Replication with this source has stopped.

The reason for not allowing replication to continue is that deleted objects may have different views on both computers. The source computer may still retain copies of objects that have been deleted (and garbage-collected) on this computer. If copying is allowed, the source computer may return deleted objects.

Last successful replication:

2005-12-26 14:16:35

Source Call ID:

065cf6c8-f6b8-065c-0100-000000000000

Source Name:

8de88ab0-f5c5-4f46-bfb9-4a2d044f98ce._ msdcs.of3d.com

Tombstone survival time (days):

60

The copy operation has failed.

User actions:

Determine which of the two computers has been disconnected from the forest and expired. You have three choices:

Downgrade or reinstall a disconnected computer. Use the repadmin /removelingeringobjects tool to remove inconsistent deleted objects and continue copying. Continue copying. Deleted objects that may cause inconsistencies. You can continue copying by using the following registry key. Once the system has copied once, it is strongly recommended that you delete this item to reset protection.

Registry key:

HKLM\System\CurrentControlSet\Services\NTDS\Parameters\Allow Replication With Divergent and Corrupt Partner

For more information, see Help and Support at http://go.microsoft.com/fwlink/events.asp

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.