Inter-Site Change Notification Not Working

Question

I made the change in ADSIEDIT to enable Inter-site change notification after adding a second AD site on our domain.
The domain level and the old domain controllers in the main site are Server 2008 and the new domain controller for the new site is 2012 R2.
I tested it by adding and deleting users on a domain controller and checking that the users were added or deleted on the domain controller at the other site.  It seemed to be working fine with that test. I could see the change within seconds.
However, I noticed that group membership changes and account lockout status are not updating quickly between sites.
I went back to ADSIEdit and saw that the "1" that I had entered in options a few days earlier was gone and it shows <not set> again.
I put the 1 back in and then when to a different domain controller and it still shows not set there.
What needs to be done to make sure that these changes stick and replicate between sites?

Answer 1

Have you enabled change-notifications on the site link according to?
http://www.ryanjadams.com/2010/05/turbo-charge-active-directory/#axzz2PaGkqbUu
Account Lockout attributes such as PwdBadCount and BadPasswordTime are NONE replicated attributes and should contain unique values on each DC, so they might not be the best to verify change-notifications against, moreover not all group memberships
are replicated to a DC if it's not GC in a multi-domain environment.
Do you have any manual connection objects (e.g.) not managed by the KCC? If so those needs to be changed back to be managed by the KCC if the change-notification option should be automatically propagated down from the site link, or either you have to enable
change-notifications manually as well on those connection objects, have a look at:
http://www.ryanjadams.com/2010/05/turbo-charge-active-directory/#axzz2PaGkqbUu
This script can help you find out if you do have manual connection objects:
Get-ADReplicationConnection -Filter {AutoGenerated -eq $False} |
Select-Object Name,AutoGenerated,ReplicateToDirectoryServer,ReplicateFromDirectoryServer |
Out-GridView
Enfo Zipper
Christoffer Andersson – Principal Advisor
http://blogs.chrisse.se - Directory Services Blog