C:\Program Files\Resource Kit>gpotool /verbose
Domain: kemco.local
Validating DCs...
ntserver1.kemco.local: OK
Available DCs:
ntserver1.kemco.local
Searching for policies...
Found 2 policies
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: Version mismatch on ntserver1.kemco.local, DS=65540, sysvol=65545
Details:
------------------------------------------------------------
DC: ntserver1.kemco.local
Friendly name: Default Domain Policy
Created: 12/7/2002 2:08:38 PM
Changed: 3/8/2006 3:40:31 AM
DS version:     1(user) 4(machine)
Sysvol version: 1(user) 9(machine)
Flags: 0
User extensions:
[{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D
-00C04FA372D4}]
Machine extensions:
[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{53D6AB1B-2488-11D1-A 28C-00C04FB94F17}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D 0-00A0C90F574B}][{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}{53D6AB1B-2488-11D1-A28C-
00C04FB94F17}]
Functionality version: 2
------------------------------------------------------------
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Error: Version mismatch on ntserver1.kemco.local, DS=13, sysvol=1
Details:
------------------------------------------------------------
DC: ntserver1.kemco.local
Friendly name: Default Domain Controllers Policy
Created: 12/7/2002 2:08:38 PM
Changed: 3/8/2006 3:27:36 AM
DS version:     0(user) 13(machine)
Sysvol version: 0(user) 1(machine)
Flags: 0
User extensions: not found
Machine extensions:
[{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A
0D0-00A0C90F574B}]
Functionality version: 2
------------------------------------------------------------

Errors found

I ran recreateDefPol.exe on the Windows 2000 Server and it let me DCPromo the
Windows 2003 into AD.

Now I get this error from GPOTool

C:\Program Files\Resource Kit>gpotool
Validating DCs...
Available DCs:
ntserver1.kemco.local
ADServer04.kemco.local
Searching for policies...
Found 2 policies
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: GPO on ntserver1.kemco.local contains user data but version is 0
Error: GPO on ADServer04.kemco.local contains user data but version is 0
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Policy OK

Policies OK

Show quoteHide quote

Make an inconsequential change to the GPO and let it replicate.  Then change
it back again.  For example, force the logoff option to be on the start
menu.

ok, I enabled "force the logoff option to be on the start menu" using
gpedit.msc. After two days I still see the same version 0 error running
gpotool.exe

Show quoteHide quote

How many DCs do you have?  Are you sure replication is happening?  Are you
sure FRS is replicating?

Use REPLMON to check directory replication.  Stick a text file within SYSVOL
or NETLOGON to test if that is replicating.  Look at the necessary event
logs on the DCs in questions for any errors.

I have three DC's in the domain now

NTServer1 - W2K - I plan on removing this server from AD
ADServer04 - W3K - New added on Mar 11th
ADServer05 - W3K - New added on Mar 17th

I ran Sonar, everyhting seems ok. DCDiag is ok, Event logs on all servers
are clean. After adding ADServer04 and ADServer05 SYSVOL on both servers was
populated.

I'll run replmon tonight and report back.


Show quoteHide quote

How's it looking?  Did REPLMON find anything?

replmon looks good, I post the logs did you see them?
Show quoteHide quote

I re-ran gpotool as a starting point

C:\Program Files\Resource Kit>gpotool
Validating DCs...
Available DCs:
ntserver1.kemco.local
ADServer05.kemco.local
ADServer04.kemco.local
Searching for policies...
Found 2 policies
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: GPO on ntserver1.kemco.local contains user data but version is 0
Error: GPO on ADServer05.kemco.local contains user data but version is 0
Error: GPO on ADServer04.kemco.local contains user data but version is 0
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Policy OK

I created some test files on each servers SYSVOL and the files replicated
almost immediately. I also ran the REPLMON test for replication errors and
found no errors.

Active Directory Replication Group Policy Object Output
Printed at    3/20/2006 9:21:24 PM

Below are the Group Policy Objects and their associated version numbers for
the server (ntserver1):

Name:         Default Domain Policy
              GUID:                      
{31B2F340-016D-11D2-945F-00C04FB984F9}
              GPO Version:                5
              GPO SysVol Version:         5

Name:         Default Domain Controllers Policy
              GUID:                      
{6AC1786C-016F-11D2-945F-00C04fB984F9}
              GPO Version:                3
              GPO SysVol Version:         3


*** Below is a listing from Replmon. ***

Active Directory Replication Monitor
Printed on 3/20/2006 9:15:07 PM
This report was generated on data from the server: NTSERVER1

***************************************************************************
                             NTSERVER1 Data
***************************************************************************

This server currently has writable copies of the following directory
partitions:
---------------------------------------------------------------------------
     CN=Schema,CN=Configuration,DC=kemco,DC=local
     CN=Configuration,DC=kemco,DC=local
     DC=kemco,DC=local

Because this server is a Global Catalog (GC) server, it also has copies
of the following directory partitions:
---------------------------------------------------------------------------

Current NTDS Connection Objects
-------------------------------
     Default-First-Site-Name\ADSERVER04
          Connection Name : a89be76b-92f5-45e6-980d-43cd5b932656
          Administrator Generated?: AUTO
          Reasons for this connection:
               Directory Partition
(CN=Schema,CN=Configuration,DC=kemco,DC=local)
                    Replicated because the replication partner is a ring
neighbor.

               Directory Partition (CN=Configuration,DC=kemco,DC=local)
                    Replicated because the replication partner is a ring
neighbor.

               Directory Partition (DC=kemco,DC=local)
                    Replicated because the replication partner is a ring
neighbor.

     Default-First-Site-Name\ADSERVER05
          Connection Name : e6eb3fb3-7456-483e-8d95-9a40a42b9a9f
          Administrator Generated?: AUTO
          Reasons for this connection:
               Directory Partition
(CN=Schema,CN=Configuration,DC=kemco,DC=local)
                    Replicated because the replication partner is a ring
neighbor.

               Directory Partition (CN=Configuration,DC=kemco,DC=local)
                    Replicated because the replication partner is a ring
neighbor.

               Directory Partition (DC=kemco,DC=local)
                    Replicated because the replication partner is a ring
neighbor.


Current Direct Replication Partner Status
-----------------------------------------

     Directory Partition: CN=Schema,CN=Configuration,DC=kemco,DC=local

          Partner Name: Default-First-Site-Name\ADSERVER05
               Partner GUID: 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               Last Attempted Replication: 3/20/2006 8:59:25 PM (local)
               Last Successful Replication: 3/20/2006 8:59:25 PM (local)
               Number of Failures:  0
               Failure Reason Error Code:  0
               Failure Description: The operation completed successfully.
               Synchronization Flags: DRS_WRIT_REP,DRS_INIT_SYNC,DRS_PER_SYNC
               USN of Last Property Updated:  34327
               USN of Last Object Updated:  34327
               Transport: Intra-Site RPC

          Partner Name: Default-First-Site-Name\ADSERVER04
               Partner GUID: A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               Last Attempted Replication: 3/20/2006 8:59:25 PM (local)
               Last Successful Replication: 3/20/2006 8:59:25 PM (local)
               Number of Failures:  0
               Failure Reason Error Code:  0
               Failure Description: The operation completed successfully.
               Synchronization Flags: DRS_WRIT_REP,DRS_INIT_SYNC,DRS_PER_SYNC
               USN of Last Property Updated:  38143
               USN of Last Object Updated:  38143
               Transport: Intra-Site RPC

          Change Notifications for this Directory Partition
          -------------------------------------------------
               Server Name: Default-First-Site-Name\ADSERVER05
                    Object GUID: F843ED8B-0A52-438A-BAD2-D89ABDFFCC8A
                    Time Added:  4/17/2018 7:39:35 PM
                    Flags:       DRS_WRIT_REP
                    Transport:   RPC
               Server Name: Default-First-Site-Name\ADSERVER04
                    Object GUID: 54172190-86C6-4F9A-8760-C4EFACF5181B
                    Time Added:  4/12/2018 10:38:46 AM
                    Flags:       DRS_WRIT_REP
                    Transport:   RPC

     Directory Partition: CN=Configuration,DC=kemco,DC=local

          Partner Name: Default-First-Site-Name\ADSERVER04
               Partner GUID: A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               Last Attempted Replication: 3/20/2006 8:59:25 PM (local)
               Last Successful Replication: 3/20/2006 8:59:25 PM (local)
               Number of Failures:  0
               Failure Reason Error Code:  0
               Failure Description: The operation completed successfully.
               Synchronization Flags: DRS_WRIT_REP,DRS_INIT_SYNC,DRS_PER_SYNC
               USN of Last Property Updated:  38101
               USN of Last Object Updated:  38101
               Transport: Intra-Site RPC

          Partner Name: Default-First-Site-Name\ADSERVER05
               Partner GUID: 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               Last Attempted Replication: 3/20/2006 8:59:25 PM (local)
               Last Successful Replication: 3/20/2006 8:59:25 PM (local)
               Number of Failures:  0
               Failure Reason Error Code:  0
               Failure Description: The operation completed successfully.
               Synchronization Flags: DRS_WRIT_REP,DRS_INIT_SYNC,DRS_PER_SYNC
               USN of Last Property Updated:  34403
               USN of Last Object Updated:  34403
               Transport: Intra-Site RPC

          Change Notifications for this Directory Partition
          -------------------------------------------------
               Server Name: Default-First-Site-Name\ADSERVER05
                    Object GUID: F843ED8B-0A52-438A-BAD2-D89ABDFFCC8A
                    Time Added:  4/17/2018 7:39:35 PM
                    Flags:       DRS_WRIT_REP
                    Transport:   RPC
               Server Name: Default-First-Site-Name\ADSERVER04
                    Object GUID: 54172190-86C6-4F9A-8760-C4EFACF5181B
                    Time Added:  4/12/2018 10:38:46 AM
                    Flags:       DRS_WRIT_REP
                    Transport:   RPC

     Directory Partition: DC=kemco,DC=local

          Partner Name: Default-First-Site-Name\ADSERVER05
               Partner GUID: 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               Last Attempted Replication: 3/20/2006 9:12:55 PM (local)
               Last Successful Replication: 3/20/2006 9:12:55 PM (local)
               Number of Failures:  0
               Failure Reason Error Code:  0
               Failure Description: The operation completed successfully.
               Synchronization Flags: DRS_WRIT_REP,DRS_INIT_SYNC,DRS_PER_SYNC
               USN of Last Property Updated:  34453
               USN of Last Object Updated:  34453
               Transport: Intra-Site RPC

          Partner Name: Default-First-Site-Name\ADSERVER04
               Partner GUID: A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               Last Attempted Replication: 3/20/2006 9:12:59 PM (local)
               Last Successful Replication: 3/20/2006 9:12:59 PM (local)
               Number of Failures:  0
               Failure Reason Error Code:  0
               Failure Description: The operation completed successfully.
               Synchronization Flags: DRS_WRIT_REP,DRS_INIT_SYNC,DRS_PER_SYNC
               USN of Last Property Updated:  38178
               USN of Last Object Updated:  38178
               Transport: Intra-Site RPC

          Change Notifications for this Directory Partition
          -------------------------------------------------
               Server Name: Default-First-Site-Name\ADSERVER05
                    Object GUID: F843ED8B-0A52-438A-BAD2-D89ABDFFCC8A
                    Time Added:  4/17/2018 7:39:35 PM
                    Flags:       DRS_WRIT_REP
                    Transport:   RPC
               Server Name: Default-First-Site-Name\ADSERVER04
                    Object GUID: 54172190-86C6-4F9A-8760-C4EFACF5181B
                    Time Added:  4/12/2018 10:38:46 AM
                    Flags:       DRS_WRIT_REP
                    Transport:   RPC

Current Transitive Replication Partner Status
---------------------------------------------

     Directory Partition: CN=Schema,CN=Configuration,DC=kemco,DC=local

          Partner Name: Default-First-Site-Name\ADSERVER05
               Partner GUID: 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               USN:  34441

          Partner Name: **DELETED SERVER #2
               Partner GUID: 35B52551-E3F8-4EA1-AA1B-86A988C4BDC1
               USN:  225105

          Partner Name: **DELETED SERVER #3
               Partner GUID: 53299A04-49D1-4787-BC10-A4A0744BD2E9
               USN:  180740

          Partner Name: **DELETED SERVER #4
               Partner GUID: 8D614A13-0F6E-431A-A004-1355D10A63DF
               USN:  100342

          Partner Name: Default-First-Site-Name\ADSERVER04
               Partner GUID: A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               USN:  38161

          Partner Name: Default-First-Site-Name\NTSERVER1
               Partner GUID: AF8DCAF1-51D1-4982-945C-01A59FDD28CA
               USN:  1166606

          Partner Name: **DELETED SERVER #5
               Partner GUID: B8F8454C-0B93-473F-A27A-DE4B6C467E76
               USN:  794119

          Partner Name: **DELETED SERVER #6
               Partner GUID: CC869AC4-3535-4A37-B2FB-560F400C1EA2
               USN:  1017999

          Partner Name: **DELETED SERVER #7
               Partner GUID: EFE737EB-A8F3-4BA7-9B06-AAD2209F4A5A
               USN:  10047

     Directory Partition: CN=Configuration,DC=kemco,DC=local

          Partner Name: Default-First-Site-Name\ADSERVER05
               Partner GUID: 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               USN:  34441

          Partner Name: **DELETED SERVER #2
               Partner GUID: 35B52551-E3F8-4EA1-AA1B-86A988C4BDC1
               USN:  225105

          Partner Name: **DELETED SERVER #3
               Partner GUID: 53299A04-49D1-4787-BC10-A4A0744BD2E9
               USN:  180740

          Partner Name: **DELETED SERVER #4
               Partner GUID: 8D614A13-0F6E-431A-A004-1355D10A63DF
               USN:  100342

          Partner Name: Default-First-Site-Name\ADSERVER04
               Partner GUID: A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               USN:  38161

          Partner Name: Default-First-Site-Name\NTSERVER1
               Partner GUID: AF8DCAF1-51D1-4982-945C-01A59FDD28CA
               USN:  1166606

          Partner Name: **DELETED SERVER #5
               Partner GUID: B8F8454C-0B93-473F-A27A-DE4B6C467E76
               USN:  794119

          Partner Name: **DELETED SERVER #6
               Partner GUID: CC869AC4-3535-4A37-B2FB-560F400C1EA2
               USN:  1017999

          Partner Name: **DELETED SERVER #7
               Partner GUID: EFE737EB-A8F3-4BA7-9B06-AAD2209F4A5A
               USN:  10047

     Directory Partition: DC=kemco,DC=local

          Partner Name: Default-First-Site-Name\ADSERVER05
               Partner GUID: 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               USN:  34463

          Partner Name: **DELETED SERVER #2
               Partner GUID: 35B52551-E3F8-4EA1-AA1B-86A988C4BDC1
               USN:  225105

          Partner Name: **DELETED SERVER #3
               Partner GUID: 53299A04-49D1-4787-BC10-A4A0744BD2E9
               USN:  180740

          Partner Name: **DELETED SERVER #4
               Partner GUID: 8D614A13-0F6E-431A-A004-1355D10A63DF
               USN:  100342

          Partner Name: Default-First-Site-Name\ADSERVER04
               Partner GUID: A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               USN:  38182

          Partner Name: Default-First-Site-Name\NTSERVER1
               Partner GUID: AF8DCAF1-51D1-4982-945C-01A59FDD28CA
               USN:  1166606

          Partner Name: **DELETED SERVER #5
               Partner GUID: B8F8454C-0B93-473F-A27A-DE4B6C467E76
               USN:  794119

          Partner Name: **DELETED SERVER #6
               Partner GUID: CC869AC4-3535-4A37-B2FB-560F400C1EA2
               USN:  1017999

          Partner Name: **DELETED SERVER #7
               Partner GUID: EFE737EB-A8F3-4BA7-9B06-AAD2209F4A5A
               USN:  10047

Current Group Policy Object Status
----------------------------------
     Default Domain Policy
          Group Policy Object GUID: {31B2F340-016D-11D2-945F-00C04FB984F9}
          Group Policy Object Version in the DS:  5
          Group Policy Object Version in SYSVOL:  5

     Default Domain Controllers Policy
          Group Policy Object GUID: {6AC1786C-016F-11D2-945F-00C04fB984F9}
          Group Policy Object Version in the DS:  3
          Group Policy Object Version in SYSVOL:  3


The server NTSERVER1 knows about the following FSMO roles:
--------------------------------------------------------------------------
     Schema FSMO: Default-First-Site-Name\NTSERVER1
     Domain Naming FSMO: Default-First-Site-Name\NTSERVER1
     Infrastructure FSMO: Default-First-Site-Name\NTSERVER1
     Primary Domain Controller FSMO: Default-First-Site-Name\NTSERVER1
     RID Pool FSMO: Default-First-Site-Name\NTSERVER1

Performance Statistics at Time of Report
----------------------------------------

Configuration (Registry)
NOTE: an empty value indicates that Windows 2000 will use the internal default
NOTE: all empty values may indicate insufficient permission to retrieve this
information from the domain controller
------------------------

     DSA
     ---

          Days per Database Phantom Scan:
          Initialize MAPI interface:
          Enforce LIST_OBJECTS rights:
          DSA Heuristics:
          Max Threads (ExDS+NSP+DRA): 15
          DSA Database file: C:\WINNT\NTDS\ntds.dit
          DSA Working Directory: C:\WINNT\NTDS
          Critical Object Installation:
          DS Drive Mappings:
          DSA Previous Restore Count: 3

     REPLICATION
     -----------

          Replicator notify pause after modify (secs): 300
          Replicator notify pause between DSAs (secs): 30
          Replicator intra site packet size (objects):
          Replicator intra site packet size (bytes):
          Replicator inter site packet size (objects):
          Replicator inter site packet size (bytes):
          Replicator maximum concurrent read threads:
          Replicator operation backlog limit:
          Replicator thread op priority threshold:
          Replicator intra site RPC handle lifetime (secs):
          Replicator inter site RPC handle lifetime (secs):
          Replicator RPC handle expiry check interval (secs):

     LDAP
     ----

          Max objects in LDAP Search (Admin Limit):
          Max concurrent LDAP connections allowed:
          Max time allowed for an LDAP Search:
          Max concurrent LDAP searches allowed:
          Max concurrent threads per LDAP connection allowed:
          Minimum idle seconds before potential \ timeout of LDAP connection
(non-authenticated client):
          Minimum idle seconds before potential \ timeout of LDAP connection
(authenticated client):

     Database
     --------

          Database backup path: C:\WINNT\NTDS\dsadata.bak
          Database backup interval (hours):
          Database log files path: C:\WINNT\NTDS
          Database logging/recovery: ON
          Hierarchy Table Recalculation interval (minutes): 720
          Database restored from backup:
          Pending object ownership conversions:
          EDB max buffers:
          EDB max log buffers:
          EDB log buffer flush threshold:
          EDB buffer flush start:
          EDB buffer flush stop:
          EDB max ver pages (increment over the minimum:
          Circular Logging:
          Server Functionality:
          TCP/IP Port:
          Restore from disk backup:
          Performance Counter Version: 10

     KCC
     ---

          Repl topology update delay (secs):
          Repl topology update period (secs):
          KCC site generator fail-over (minutes):
          KCC site generator renewal interval (minutes):
          KCC site generator renewal interval (minutes):
          CriticalLinkFailuresAllowed:
          MaxFailureTimeForCriticalLink (sec):
          NonCriticalLinkFailuresAllowed:
          MaxFailureTimeForNonCriticalLink (sec):
          IntersiteFailuresAllowed:
          MaxFailureTimeForIntersiteLink (sec):
          KCC connection failures:
          IntersiteFailuresAllowed:
          IntersiteFailuresAllowed:

***************************************************************************
                            Enterprise Data
***************************************************************************

Globally Unique Identifiers (GUIDs) for each domain controller in the
enterprise
NOTE:  the absence of a GUID means that the server has been demoted. --------------------------------------------------------------------------------

     Site Name:  Default-First-Site-Name
     ---------------------------------------
     Site Options           :
     Site Topology Generator: CN=NTDS Settings,CN=ADSERVER04,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kemco,DC=local
     Site Topology Renewal  :
     Site Topology Failover :

          ADSERVER04
               Server GUID (used for DNS)                                   
               Replication Database GUID (used to identify partner in
replication): A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               DSA Options               :
               DSA Computer Path         : CN=ADSERVER04,OU=Domain
Controllers,DC=kemco,DC=local
               DSA Schema Location       :
CN=Schema,CN=Configuration,DC=kemco,DC=local
               DSA Mail Address          :
               DSA DNS Host Name         : ADServer04.kemco.local
               DSA BridgeHead Transports :

          ADSERVER05
               Server GUID (used for DNS)                                   
               Replication Database GUID (used to identify partner in
replication): 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               DSA Options               :
               DSA Computer Path         : CN=ADServer05,OU=Domain
Controllers,DC=kemco,DC=local
               DSA Schema Location       :
CN=Schema,CN=Configuration,DC=kemco,DC=local
               DSA Mail Address          :
               DSA DNS Host Name         : ADServer05.kemco.local
               DSA BridgeHead Transports :

          NTSERVER1
               Server GUID (used for DNS)                                   
               Replication Database GUID (used to identify partner in
replication): AF8DCAF1-51D1-4982-945C-01A59FDD28CA
               DSA Options               : NTDSDSA_OPT_IS_GC
               DSA Computer Path         : CN=NTSERVER1,OU=Domain
Controllers,DC=kemco,DC=local
               DSA Schema Location       :
CN=Schema,CN=Configuration,DC=kemco,DC=local
               DSA Mail Address          :
_IsmService@f452ba4b-b52d-4a72-9cba-2826bc15e7e6._msdcs.kemco.local
               DSA DNS Host Name         : ntserver1.kemco.local
               DSA BridgeHead Transports :



Site Links and Site Link Bridges
-----------------------------------------------------

     Site Links
     ----------

          DEFAULTIPSITELINK
               Link Type:           : IP
               Distinguished Name   :
CN=DEFAULTIPSITELINK,CN=IP,CN=Inter-Site
Transports,CN=Sites,CN=Configuration,DC=kemco,DC=local
               Replication Interval : 180
               Cost                 : 100
               Options              :
               Site List            :
                                      Default-First-Site-Name

     Site Link Bridges
     ------------------

          Active Directory Replication Monitor determined that no Site Link
Bridges are present in the Directory.
     Inter-Site Transports
     ---------------------

          IP
               Options     :
               DLL Name    : ismip.dll
               Address Type: dNSHostName

          SMTP
               Options     : NTDSTRANSPORT_OPT_IGNORE_SCHEDULES
               DLL Name    : ismsmtp.dll
               Address Type: mailAddress

     Subnets
     -------
          Active Directory Replication Monitor determined that no Subnets
are present in the Directory.
     Active Directory Configuration Data
     -----------------------------------
          Stay of Execution for Servers: 0
          SPN Mappings                 : host=alerter,appmgmt,cisvc,clipsrv,browser,dhcp,dnscache,replicator,eventlog,eventsystem,policyagent,oakley,dmserver,dns,mcsvc,fax,msiserver,ias,messenger,netlogon,netman,netdde,netddedsm,nmagent,plugplay,protectedstorage,rasman,rpclocator,rpc,rpcss,remoteaccess,rsvp,samss,scardsvr,scesrv,seclogon,scm,dcom,cifs,spooler,snmp,schedule,tapisrv,trksvr,trkwks,ups,time,wins,www,http,w3svc,iisadmin


Show quoteHide quote

I re-ran gpotool as a starting point

C:\Program Files\Resource Kit>gpotool
Validating DCs...
Available DCs:
ntserver1.kemco.local
ADServer05.kemco.local
ADServer04.kemco.local
Searching for policies...
Found 2 policies
============================================================
Policy {31B2F340-016D-11D2-945F-00C04FB984F9}
Error: GPO on ntserver1.kemco.local contains user data but version is 0
Error: GPO on ADServer05.kemco.local contains user data but version is 0
Error: GPO on ADServer04.kemco.local contains user data but version is 0
Policy OK
============================================================
Policy {6AC1786C-016F-11D2-945F-00C04FB984F9}
Policy OK

I created some test files on each servers SYSVOL and the files replicated
almost immediately. I also ran the REPLMON test for replication errors and
found no errors.

Active Directory Replication Group Policy Object Output
Printed at    3/20/2006 9:21:24 PM

Below are the Group Policy Objects and their associated version numbers for
the server (ntserver1):

Name:         Default Domain Policy
              GUID:                      
{31B2F340-016D-11D2-945F-00C04FB984F9}
              GPO Version:                5
              GPO SysVol Version:         5

Name:         Default Domain Controllers Policy
              GUID:                      
{6AC1786C-016F-11D2-945F-00C04fB984F9}
              GPO Version:                3
              GPO SysVol Version:         3


*** Below is a listing from Replmon. ***

Active Directory Replication Monitor
Printed on 3/20/2006 9:15:07 PM
This report was generated on data from the server: NTSERVER1

***************************************************************************
                             NTSERVER1 Data
***************************************************************************

This server currently has writable copies of the following directory
partitions:
---------------------------------------------------------------------------
     CN=Schema,CN=Configuration,DC=kemco,DC=local
     CN=Configuration,DC=kemco,DC=local
     DC=kemco,DC=local

Because this server is a Global Catalog (GC) server, it also has copies
of the following directory partitions:
---------------------------------------------------------------------------

Current NTDS Connection Objects
-------------------------------
     Default-First-Site-Name\ADSERVER04
          Connection Name : a89be76b-92f5-45e6-980d-43cd5b932656
          Administrator Generated?: AUTO
          Reasons for this connection:
               Directory Partition
(CN=Schema,CN=Configuration,DC=kemco,DC=local)
                    Replicated because the replication partner is a ring
neighbor.

               Directory Partition (CN=Configuration,DC=kemco,DC=local)
                    Replicated because the replication partner is a ring
neighbor.

               Directory Partition (DC=kemco,DC=local)
                    Replicated because the replication partner is a ring
neighbor.

     Default-First-Site-Name\ADSERVER05
          Connection Name : e6eb3fb3-7456-483e-8d95-9a40a42b9a9f
          Administrator Generated?: AUTO
          Reasons for this connection:
               Directory Partition
(CN=Schema,CN=Configuration,DC=kemco,DC=local)
                    Replicated because the replication partner is a ring
neighbor.

               Directory Partition (CN=Configuration,DC=kemco,DC=local)
                    Replicated because the replication partner is a ring
neighbor.

               Directory Partition (DC=kemco,DC=local)
                    Replicated because the replication partner is a ring
neighbor.


Current Direct Replication Partner Status
-----------------------------------------

     Directory Partition: CN=Schema,CN=Configuration,DC=kemco,DC=local

          Partner Name: Default-First-Site-Name\ADSERVER05
               Partner GUID: 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               Last Attempted Replication: 3/20/2006 8:59:25 PM (local)
               Last Successful Replication: 3/20/2006 8:59:25 PM (local)
               Number of Failures:  0
               Failure Reason Error Code:  0
               Failure Description: The operation completed successfully.
               Synchronization Flags: DRS_WRIT_REP,DRS_INIT_SYNC,DRS_PER_SYNC
               USN of Last Property Updated:  34327
               USN of Last Object Updated:  34327
               Transport: Intra-Site RPC

          Partner Name: Default-First-Site-Name\ADSERVER04
               Partner GUID: A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               Last Attempted Replication: 3/20/2006 8:59:25 PM (local)
               Last Successful Replication: 3/20/2006 8:59:25 PM (local)
               Number of Failures:  0
               Failure Reason Error Code:  0
               Failure Description: The operation completed successfully.
               Synchronization Flags: DRS_WRIT_REP,DRS_INIT_SYNC,DRS_PER_SYNC
               USN of Last Property Updated:  38143
               USN of Last Object Updated:  38143
               Transport: Intra-Site RPC

          Change Notifications for this Directory Partition
          -------------------------------------------------
               Server Name: Default-First-Site-Name\ADSERVER05
                    Object GUID: F843ED8B-0A52-438A-BAD2-D89ABDFFCC8A
                    Time Added:  4/17/2018 7:39:35 PM
                    Flags:       DRS_WRIT_REP
                    Transport:   RPC
               Server Name: Default-First-Site-Name\ADSERVER04
                    Object GUID: 54172190-86C6-4F9A-8760-C4EFACF5181B
                    Time Added:  4/12/2018 10:38:46 AM
                    Flags:       DRS_WRIT_REP
                    Transport:   RPC

     Directory Partition: CN=Configuration,DC=kemco,DC=local

          Partner Name: Default-First-Site-Name\ADSERVER04
               Partner GUID: A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               Last Attempted Replication: 3/20/2006 8:59:25 PM (local)
               Last Successful Replication: 3/20/2006 8:59:25 PM (local)
               Number of Failures:  0
               Failure Reason Error Code:  0
               Failure Description: The operation completed successfully.
               Synchronization Flags: DRS_WRIT_REP,DRS_INIT_SYNC,DRS_PER_SYNC
               USN of Last Property Updated:  38101
               USN of Last Object Updated:  38101
               Transport: Intra-Site RPC

          Partner Name: Default-First-Site-Name\ADSERVER05
               Partner GUID: 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               Last Attempted Replication: 3/20/2006 8:59:25 PM (local)
               Last Successful Replication: 3/20/2006 8:59:25 PM (local)
               Number of Failures:  0
               Failure Reason Error Code:  0
               Failure Description: The operation completed successfully.
               Synchronization Flags: DRS_WRIT_REP,DRS_INIT_SYNC,DRS_PER_SYNC
               USN of Last Property Updated:  34403
               USN of Last Object Updated:  34403
               Transport: Intra-Site RPC

          Change Notifications for this Directory Partition
          -------------------------------------------------
               Server Name: Default-First-Site-Name\ADSERVER05
                    Object GUID: F843ED8B-0A52-438A-BAD2-D89ABDFFCC8A
                    Time Added:  4/17/2018 7:39:35 PM
                    Flags:       DRS_WRIT_REP
                    Transport:   RPC
               Server Name: Default-First-Site-Name\ADSERVER04
                    Object GUID: 54172190-86C6-4F9A-8760-C4EFACF5181B
                    Time Added:  4/12/2018 10:38:46 AM
                    Flags:       DRS_WRIT_REP
                    Transport:   RPC

     Directory Partition: DC=kemco,DC=local

          Partner Name: Default-First-Site-Name\ADSERVER05
               Partner GUID: 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               Last Attempted Replication: 3/20/2006 9:12:55 PM (local)
               Last Successful Replication: 3/20/2006 9:12:55 PM (local)
               Number of Failures:  0
               Failure Reason Error Code:  0
               Failure Description: The operation completed successfully.
               Synchronization Flags: DRS_WRIT_REP,DRS_INIT_SYNC,DRS_PER_SYNC
               USN of Last Property Updated:  34453
               USN of Last Object Updated:  34453
               Transport: Intra-Site RPC

          Partner Name: Default-First-Site-Name\ADSERVER04
               Partner GUID: A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               Last Attempted Replication: 3/20/2006 9:12:59 PM (local)
               Last Successful Replication: 3/20/2006 9:12:59 PM (local)
               Number of Failures:  0
               Failure Reason Error Code:  0
               Failure Description: The operation completed successfully.
               Synchronization Flags: DRS_WRIT_REP,DRS_INIT_SYNC,DRS_PER_SYNC
               USN of Last Property Updated:  38178
               USN of Last Object Updated:  38178
               Transport: Intra-Site RPC

          Change Notifications for this Directory Partition
          -------------------------------------------------
               Server Name: Default-First-Site-Name\ADSERVER05
                    Object GUID: F843ED8B-0A52-438A-BAD2-D89ABDFFCC8A
                    Time Added:  4/17/2018 7:39:35 PM
                    Flags:       DRS_WRIT_REP
                    Transport:   RPC
               Server Name: Default-First-Site-Name\ADSERVER04
                    Object GUID: 54172190-86C6-4F9A-8760-C4EFACF5181B
                    Time Added:  4/12/2018 10:38:46 AM
                    Flags:       DRS_WRIT_REP
                    Transport:   RPC

Current Transitive Replication Partner Status
---------------------------------------------

     Directory Partition: CN=Schema,CN=Configuration,DC=kemco,DC=local

          Partner Name: Default-First-Site-Name\ADSERVER05
               Partner GUID: 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               USN:  34441

          Partner Name: **DELETED SERVER #2
               Partner GUID: 35B52551-E3F8-4EA1-AA1B-86A988C4BDC1
               USN:  225105

          Partner Name: **DELETED SERVER #3
               Partner GUID: 53299A04-49D1-4787-BC10-A4A0744BD2E9
               USN:  180740

          Partner Name: **DELETED SERVER #4
               Partner GUID: 8D614A13-0F6E-431A-A004-1355D10A63DF
               USN:  100342

          Partner Name: Default-First-Site-Name\ADSERVER04
               Partner GUID: A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               USN:  38161

          Partner Name: Default-First-Site-Name\NTSERVER1
               Partner GUID: AF8DCAF1-51D1-4982-945C-01A59FDD28CA
               USN:  1166606

          Partner Name: **DELETED SERVER #5
               Partner GUID: B8F8454C-0B93-473F-A27A-DE4B6C467E76
               USN:  794119

          Partner Name: **DELETED SERVER #6
               Partner GUID: CC869AC4-3535-4A37-B2FB-560F400C1EA2
               USN:  1017999

          Partner Name: **DELETED SERVER #7
               Partner GUID: EFE737EB-A8F3-4BA7-9B06-AAD2209F4A5A
               USN:  10047

     Directory Partition: CN=Configuration,DC=kemco,DC=local

          Partner Name: Default-First-Site-Name\ADSERVER05
               Partner GUID: 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               USN:  34441

          Partner Name: **DELETED SERVER #2
               Partner GUID: 35B52551-E3F8-4EA1-AA1B-86A988C4BDC1
               USN:  225105

          Partner Name: **DELETED SERVER #3
               Partner GUID: 53299A04-49D1-4787-BC10-A4A0744BD2E9
               USN:  180740

          Partner Name: **DELETED SERVER #4
               Partner GUID: 8D614A13-0F6E-431A-A004-1355D10A63DF
               USN:  100342

          Partner Name: Default-First-Site-Name\ADSERVER04
               Partner GUID: A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               USN:  38161

          Partner Name: Default-First-Site-Name\NTSERVER1
               Partner GUID: AF8DCAF1-51D1-4982-945C-01A59FDD28CA
               USN:  1166606

          Partner Name: **DELETED SERVER #5
               Partner GUID: B8F8454C-0B93-473F-A27A-DE4B6C467E76
               USN:  794119

          Partner Name: **DELETED SERVER #6
               Partner GUID: CC869AC4-3535-4A37-B2FB-560F400C1EA2
               USN:  1017999

          Partner Name: **DELETED SERVER #7
               Partner GUID: EFE737EB-A8F3-4BA7-9B06-AAD2209F4A5A
               USN:  10047

     Directory Partition: DC=kemco,DC=local

          Partner Name: Default-First-Site-Name\ADSERVER05
               Partner GUID: 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               USN:  34463

          Partner Name: **DELETED SERVER #2
               Partner GUID: 35B52551-E3F8-4EA1-AA1B-86A988C4BDC1
               USN:  225105

          Partner Name: **DELETED SERVER #3
               Partner GUID: 53299A04-49D1-4787-BC10-A4A0744BD2E9
               USN:  180740

          Partner Name: **DELETED SERVER #4
               Partner GUID: 8D614A13-0F6E-431A-A004-1355D10A63DF
               USN:  100342

          Partner Name: Default-First-Site-Name\ADSERVER04
               Partner GUID: A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               USN:  38182

          Partner Name: Default-First-Site-Name\NTSERVER1
               Partner GUID: AF8DCAF1-51D1-4982-945C-01A59FDD28CA
               USN:  1166606

          Partner Name: **DELETED SERVER #5
               Partner GUID: B8F8454C-0B93-473F-A27A-DE4B6C467E76
               USN:  794119

          Partner Name: **DELETED SERVER #6
               Partner GUID: CC869AC4-3535-4A37-B2FB-560F400C1EA2
               USN:  1017999

          Partner Name: **DELETED SERVER #7
               Partner GUID: EFE737EB-A8F3-4BA7-9B06-AAD2209F4A5A
               USN:  10047

Current Group Policy Object Status
----------------------------------
     Default Domain Policy
          Group Policy Object GUID: {31B2F340-016D-11D2-945F-00C04FB984F9}
          Group Policy Object Version in the DS:  5
          Group Policy Object Version in SYSVOL:  5

     Default Domain Controllers Policy
          Group Policy Object GUID: {6AC1786C-016F-11D2-945F-00C04fB984F9}
          Group Policy Object Version in the DS:  3
          Group Policy Object Version in SYSVOL:  3


The server NTSERVER1 knows about the following FSMO roles:
--------------------------------------------------------------------------
     Schema FSMO: Default-First-Site-Name\NTSERVER1
     Domain Naming FSMO: Default-First-Site-Name\NTSERVER1
     Infrastructure FSMO: Default-First-Site-Name\NTSERVER1
     Primary Domain Controller FSMO: Default-First-Site-Name\NTSERVER1
     RID Pool FSMO: Default-First-Site-Name\NTSERVER1

Performance Statistics at Time of Report
----------------------------------------

Configuration (Registry)
NOTE: an empty value indicates that Windows 2000 will use the internal default
NOTE: all empty values may indicate insufficient permission to retrieve this
information from the domain controller
------------------------

     DSA
     ---

          Days per Database Phantom Scan:
          Initialize MAPI interface:
          Enforce LIST_OBJECTS rights:
          DSA Heuristics:
          Max Threads (ExDS+NSP+DRA): 15
          DSA Database file: C:\WINNT\NTDS\ntds.dit
          DSA Working Directory: C:\WINNT\NTDS
          Critical Object Installation:
          DS Drive Mappings:
          DSA Previous Restore Count: 3

     REPLICATION
     -----------

          Replicator notify pause after modify (secs): 300
          Replicator notify pause between DSAs (secs): 30
          Replicator intra site packet size (objects):
          Replicator intra site packet size (bytes):
          Replicator inter site packet size (objects):
          Replicator inter site packet size (bytes):
          Replicator maximum concurrent read threads:
          Replicator operation backlog limit:
          Replicator thread op priority threshold:
          Replicator intra site RPC handle lifetime (secs):
          Replicator inter site RPC handle lifetime (secs):
          Replicator RPC handle expiry check interval (secs):

     LDAP
     ----

          Max objects in LDAP Search (Admin Limit):
          Max concurrent LDAP connections allowed:
          Max time allowed for an LDAP Search:
          Max concurrent LDAP searches allowed:
          Max concurrent threads per LDAP connection allowed:
          Minimum idle seconds before potential \ timeout of LDAP connection
(non-authenticated client):
          Minimum idle seconds before potential \ timeout of LDAP connection
(authenticated client):

     Database
     --------

          Database backup path: C:\WINNT\NTDS\dsadata.bak
          Database backup interval (hours):
          Database log files path: C:\WINNT\NTDS
          Database logging/recovery: ON
          Hierarchy Table Recalculation interval (minutes): 720
          Database restored from backup:
          Pending object ownership conversions:
          EDB max buffers:
          EDB max log buffers:
          EDB log buffer flush threshold:
          EDB buffer flush start:
          EDB buffer flush stop:
          EDB max ver pages (increment over the minimum:
          Circular Logging:
          Server Functionality:
          TCP/IP Port:
          Restore from disk backup:
          Performance Counter Version: 10

     KCC
     ---

          Repl topology update delay (secs):
          Repl topology update period (secs):
          KCC site generator fail-over (minutes):
          KCC site generator renewal interval (minutes):
          KCC site generator renewal interval (minutes):
          CriticalLinkFailuresAllowed:
          MaxFailureTimeForCriticalLink (sec):
          NonCriticalLinkFailuresAllowed:
          MaxFailureTimeForNonCriticalLink (sec):
          IntersiteFailuresAllowed:
          MaxFailureTimeForIntersiteLink (sec):
          KCC connection failures:
          IntersiteFailuresAllowed:
          IntersiteFailuresAllowed:

***************************************************************************
                            Enterprise Data
***************************************************************************

Globally Unique Identifiers (GUIDs) for each domain controller in the
enterprise
NOTE:  the absence of a GUID means that the server has been demoted. --------------------------------------------------------------------------------

     Site Name:  Default-First-Site-Name
     ---------------------------------------
     Site Options           :
     Site Topology Generator: CN=NTDS
Settings,CN=ADSERVER04,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=kemco,DC=local
     Site Topology Renewal  :
     Site Topology Failover :

          ADSERVER04
               Server GUID (used for DNS)                                   
               Replication Database GUID (used to identify partner in
replication): A65ED6A9-4118-46AE-94AB-3FDE349AA38A
               DSA Options               :
               DSA Computer Path         : CN=ADSERVER04,OU=Domain
Controllers,DC=kemco,DC=local
               DSA Schema Location       :
CN=Schema,CN=Configuration,DC=kemco,DC=local
               DSA Mail Address          :
               DSA DNS Host Name         : ADServer04.kemco.local
               DSA BridgeHead Transports :

          ADSERVER05
               Server GUID (used for DNS)                                   
               Replication Database GUID (used to identify partner in
replication): 0985BADE-B6B0-472B-AEE9-CEFF968236F0
               DSA Options               :
               DSA Computer Path         : CN=ADServer05,OU=Domain
Controllers,DC=kemco,DC=local
               DSA Schema Location       :
CN=Schema,CN=Configuration,DC=kemco,DC=local
               DSA Mail Address          :
               DSA DNS Host Name         : ADServer05.kemco.local
               DSA BridgeHead Transports :

          NTSERVER1
               Server GUID (used for DNS)                                   
               Replication Database GUID (used to identify partner in
replication): AF8DCAF1-51D1-4982-945C-01A59FDD28CA
               DSA Options               : NTDSDSA_OPT_IS_GC
               DSA Computer Path         : CN=NTSERVER1,OU=Domain
Controllers,DC=kemco,DC=local
               DSA Schema Location       :
CN=Schema,CN=Configuration,DC=kemco,DC=local
               DSA Mail Address          :
_IsmService@f452ba4b-b52d-4a72-9cba-2826bc15e7e6._msdcs.kemco.local
               DSA DNS Host Name         : ntserver1.kemco.local
               DSA BridgeHead Transports :



Site Links and Site Link Bridges
-----------------------------------------------------

     Site Links
     ----------

          DEFAULTIPSITELINK
               Link Type:           : IP
               Distinguished Name   :
CN=DEFAULTIPSITELINK,CN=IP,CN=Inter-Site
Transports,CN=Sites,CN=Configuration,DC=kemco,DC=local
               Replication Interval : 180
               Cost                 : 100
               Options              :
               Site List            :
                                      Default-First-Site-Name

     Site Link Bridges
     ------------------

          Active Directory Replication Monitor determined that no Site Link
Bridges are present in the Directory.
     Inter-Site Transports
     ---------------------

          IP
               Options     :
               DLL Name    : ismip.dll
               Address Type: dNSHostName

          SMTP
               Options     : NTDSTRANSPORT_OPT_IGNORE_SCHEDULES
               DLL Name    : ismsmtp.dll
               Address Type: mailAddress

     Subnets
     -------
          Active Directory Replication Monitor determined that no Subnets
are present in the Directory.
     Active Directory Configuration Data
     -----------------------------------
          Stay of Execution for Servers: 0
          SPN Mappings                 :
host=alerter,appmgmt,cisvc,clipsrv,browser,dhcp,dnscache,replicator,eventlog,eventsystem,policyagent,oakley,dmserver,dns,mcsvc,fax,msiserver,ias,messenger,netlogon,netman,netdde,netddedsm,nmagent,plugplay,protectedstorage,rasman,rpclocator,rpc,rpcss,remoteaccess,rsvp,samss,scardsvr,scesrv,seclogon,scm,dcom,cifs,spooler,snmp,schedule,tapisrv,trksvr,trkwks,ups,time,wins,www,http,w3svc,iisadmin


Show quoteHide quote

Zero results returned for uSNchanged search...
R2 Schema Changes
Utilizing 2003 R2 improvements
anyone able to answer an ADAM question?
NTDS KCC Error 1925 and 2042 in Even manager
ADAM and replica link
Correct way to Permission attibutes
GPO Update won't update
Limit users to logon only to computer that belong to user's domain
adding a new domain and removeing the old one?