Multiple Domain Controllers, different sites, checking status for replication

Good day,
How can you see what DC has the current "master" or most up to date version? If I have 3 DCs and 3 different sites, and I add a new user at one of the sites, then that site has the newest master. How can I check what version of the Global Catalog / ADUC version / revision they each have?
Is there a CMD / Powershell script to do so?
This topic first appeared in the Spiceworks Community

New Delhi: When you fall ill or want to seek medical advice, who do you turn to? Your family doctor or the neighbourhood medico, of course. But, experts say, you may now have another option: social media.
WhatsApp, Twitter and Facebook, among others, are helping doctors to reach out to patients, guide them for treatments, provide counselling post-surgery and create close-knit support communities, as more Indians join social media platforms.
"We are frequently using WhatsApp, Skype and Viber to reach out to patients. Currently, we have over 180 patients connected via WhatsApp and over 30 through Skype who are receiving online rehabilitation training," says Dr H.S. Chhabra, medical director and chief of spine service at the Indian Spinal Injuries Centre in New Delhi...Read More
Read More

Similar Messages

OIM provisioning to Multiple Domain Controllers of a single Domain

Hi experts !
Our client has offices in different parts of country and they are using MS AD. We have to integrated this AD with OIM. The issue we are facing is that there is a cluster of domain controllers (DC) at each location for example NewYork, Dallas and Ohio and OIM is being deployed in NY. All the DC at all location are part of a single domain "example.com" and they is no child domain.
Now if a User Administrator in Ohio logs in to this central OIM online and creates / modifies user profile of a user in AD, it means that the OIM will create / update the user profile in the DC placed in NY and through AD replication, it will be pushed to Ohio.
As the communication between few sites is not reliable, thus managers at these locations will have to bear the delays if the replication between DCs takes time even when they have modified the resource profile in OIM.
Is it a possibility that the user administrator at location A, when modifies the user resource profile, the modifications is carried out in the DC of location A? for example, if the administrator in Ohio logs in, whenever, he changes the profile, OIM modifies the profile in DC placed at Ohio?
I have gone through "Configuring the Connector for Multiple Installations of the Target System" in MS AD connector Documentation but i am uncertain whether this "target system" means DC of same domain or different child domains?
Any help / idea would be really appreciated.
Best Regards.
Edited by: Zia on May 8, 2011 11:21 PM
Edited by: Zia on May 8, 2011 11:22 PM

thank you for your reply sir
initially i was of the idea to place OIM servers at each location with DB at a central point. However, there are more than a dozen such locations! have you come accross any such scenario where more than 12 machines running OIM at different places point to a central DB? i was a bit reluctant in proposing such design due to network instability. So we decided to deploy OIM at a single location in cluster mode and admins at each location will access this single instance (cluster) over the WAN. This cluster will populate domain controller at this specific location and will be replicated through AD replication.
But now the analysis team has pointed out the problem scenario as i have mentioned in my earlier post. so we are in a bit fix how to handle this situation :-s

Announcing the availability of enabling Windows Server 2012 R2 Essentials' integration of Microsoft online services in environments with multiple domain controllers

In Windows Server Essentials 2012 R2, all of our online services integration features, including Azure Active Directory and Office 365, are supported only in environments that
have a single domain controller. In environments with more than one domain controller, integration of these services is blocked due limitations in the user account and password synchronization mechanism in Windows Server Essentials.
I am happy to announce that with the recent Windows August Update released on (8/12/2014, PST), this limitation has been removed. This update adds support for both Azure
Active Directory integration and Office 365 integration features in domain environments consisting of a single domain controller, multiple domain controllers, or Windows Server Essentials as a domain member server.
For more information, please go to
http://support.microsoft.com/kb/2974308

Hi JoeBeck,
Thanks for the comment. Could you please tell which link you clicked to download?
Please go to PinPoint check details and start download
http://pinpoint.microsoft.com/en-US/applications/Dynamics-CRM-Online-Add-in-12884966386
Thanks,
Shanghai Wicresoft

Cannot have multiple domain controllers with Essentials role in 2012 R2 Standard/Datacenter

Microsoft's Technet post on deploying Essentials Role in an existing AD environment states the following:
"The online service integration features only work when the server is a domain controller. Also, integration cannot be initiated if there are multiple domain controllers in the environment. The product team is investigating possible solutions."
http://blogs.technet.com/b/sbs/archive/2013/10/28/enabling-multiple-instances-of-windows-server-essentials-experience-in-your-environment.aspx
Microsoft Essentials Role product team, can you let us know when this will be fixed? I will not be installing Essentials as a Role if I cannot have multiple domain controllers.
As soon as I add another domain controller the Essentials role no longer functions as designed.
This is quite an oversight by your team. Can we have an ETA for a fix to this please?
Here are more with the same issue:
http://social.technet.microsoft.com/Forums/en-US/ed34abe9-6412-415d-950a-50c9675deb2e/unable-to-register-essentials-experience-role-with-microsoft-online-services?forum=2012R2EssentialsPreview

Hi. We can't give ETA. Most user there that help does not work for Microsoft. (and if a Microsoft's employee help, then it's on it's free time at home or during break)
Thus, for that reason, please call the support to get a good answer on the ETA is it's planned or not. Be advised that the essential's version replaced the SBS, thus it target small office, such limitation can stay for a long time IMO.
Regards, Philippe

Essentials 2012 R2 Exchange Integration with Multiple Domain Controllers

Attempting to integrate Exchange Server 2012 with the Essentials wizard results in the error message: "This task must be performed on the domain controller." I've found several threads that speculate this is because there are multiple domain controllers
in the domain. Is there a workaround or patch available to resolve this issue? Why wouldn't Microsoft want the redundancy of multiple DCs?
Thanks.

Hi HartmannTek,
I agree with Robert.
We can get the following information from the article:
Services Integration Overview for Windows Server 2012 R2 Essentials - Part 1. Please refer to.
Currently, the Services Integration features, including Windows Azure Active Directory integration, Office
365 integration, Windows Intune integration, and on-premises Exchange integration, are only supported in a single domain controller environment. In addition, the integration wizard must be run on a domain controller.
Hope this helps.
Best regards,
Justin Gu

Check status for Shopping Cart to include F-53 postings

Dear SRM GURUS
we are following a classic scenarios and SRM version 4.0 where in we create a shopping cart in SRM and a purchase Req is created in backend and based on that we create a Purchase Order and do a Goods receipts and Invoice Booking in MIRO in R3.
When we check the status of shopping cart we are able to view all in SRM check status for shopping cart.
Now my requiremnt is that when after MIRO in R/3 we run F-53 for payement to vendor.
Whether this can be displayed in the shopping cart check status that as to when actual payement was made to the vendor through F-53.
regards,
Nimish Sheth

F-53 transaction(R/3) status in SRM

How to automate checking status of Replication agent and Replication queue in CQ5

As part of monitoring the status of replication agents and replication queue, is it possible to automate the checking process?
We can check them from GUI, but from a monitoring perspective we are loking for a mechanism where the status can be checked continuously and we are alerted whenever there is some issue.
1. Check status of replication agent (enabled/disabled)
2. Check status of replication queue (if the queue is blocked)
Thanks in advance
nkrao

you can pull the queue from the page the same way the UI gets the list
in the table:
curl -u admin:admin
"http://localhost:4502/etc/replication/agents.author/publish/jcr:content.queue.json?agent=p ublish"
and then use a shell library like ticktick.sh to parse the json
response. A sample of how to get the bundles loaded and installed from
CQ using the ticktick library can be found here
https://github.com/kristopolous/TickTick
http://ruben42.wordpress.com/2012/04/24/using-ticktick-sh-to-parse-json-responses-from-ado be-cq5-5/

Windows Server - Run multiple domains under different accounts

Hi,
I have multiple domains on a Windows Server. I'd like to run these under separate accounts for security reasons.
My options I have so far:
1) Install all Admin servers and managed servers as windows services and set logon appropriately
2) If possible, use multiple node manager instances, one for each domain and set the log on for each node manager windows service
I like the idea of multiple node managers but I can't find any reference in the documentation about this. I'd rather not use option 1 as I won't be able to restart servers from the WebLogic Console
Has anyone had to do this before?

First option might be the cleanest .
For second option make sure that there are separate Node_Manager home directory for different node manager instances.
Edited by: atheek1 on Jun 19, 2010 4:55 AM

How to track multiple documents across different sites

What I am trying to do seems relatively simple yet I can't seem to find a way to do it.
I have found methods to track documents relative to me and recently modified documents within a specific site.
Basically I want to take document A from the Developer site, document B from the HR site and Document C from the Architecture site and display them in a webpart on a different site that will let me see when they have been modified and by who. It seems that
you can display whole libraries in a webpart from another sites but not select documents from multiple libraries.
I have tried making copies to display in a webpart but it doesn't show you when the original has been modified. I need the originals to remain yet display there status in a webpart on a different site.
Any advise or direction would be greatly appreciated.
Thanks!

Hi,
According to your post, my understanding is that you wanted to display libraries in different sites.
You can save the library web part to file, then upload the file to a different site.
When you modify the library files, in the different site the web part would also update.
http://www.microsofttechnology.net/2013/04/sharepoint-2010-display-list-or-library.html
More references:
https://listrollup.codeplex.com/
https://store.bamboosolutions.com/sharepoint-Cross-Site-Display-Web-Part.aspx
Thanks & Regards,
Jason
Jason Guo
TechNet Community Support

Check status for Derived role generation

Hello,
We are trying to place a check to validate and ensure that the child roles are generated using "generate derived role" (CtrlShiftF4) from the parent role. However, i'm not able to find an appropriate function module or table field via which this can be checked.
Are there any options to check this?
Thanks in advance
Vijaya

Hi,
You can find the status of the roles whether the profile is generated or not .. with PFCG only.
PFCG
-> Utilities (M)
-> Overview Status (CtrlShiftF11)
Give the role names (for which you need to know whether they are generated or not)
Tick/select - Only Display Roles with Errors and Warnings
-> Execute
It will display all the role names and profile name and their status green generated, yellow not generated. If you copy all data and paste it in the excel it would be like below...
ZS_ECC_NPR_AFM_TESTING_GL @IC\QSingle Role@ 11/20/2011 12:47:32 VKUMAR @5C\QNo menu exists@ @5D\QCurrent version not generated@ ZNPRAFMTES @5D\QUser master record not completely updated@
ZS_ECC_NPR_DATABASE_ADMIN_GL @IC\QSingle Role@ 08/02/11 18:02:26 MMAKUCH @5C\QNo menu exists@ @5B\QAuthorization profile is generated@ ZNPRDTBADM @5C\QNo users are assigned@
Hope this helps you.
Thanks,
Vinod

Are multiple inits with different selection criteria possible for LO

Extractor 2lis_02_itm?
Thanks
Reddy

Hi
we use the multiple init scenario whenever there are huge data volumes for initialization and just to get the set up tables filled up in case of LO extraction, with minimum downtime (as the downtime can take upto 2-3 days) so as not to affect the users and also risk losing data, we do multiple inits to reduce the downtime and get the set up tables filled up.
Yes in your extractor you can but be careful the selection crieteria does not overlap
Hope this helps
Anand Raj

Checking Status for Weblogic 10.3

Can anyone suggest me how to check the status of wls 10.3 without using ps-ef or WLST or weblogic.Admin, do we have any other flags or methods were the status could be returned as RUNNING or ADMIN

Hi Eden,
If you dont want to use WLST, weblogic.Admin or "ps -ef" tools to get the Server State then you can try using MBeans (JMX coding) to get the Server State..like: http://weblogic-wonders.com/weblogic/2010/06/22/getting-all-server-state-info-in-9-x-jmx-style/
Thanks
Jay SenSharma

Server 2012 R2 Domain Controllers stop accepting log in and replication failure.

We have recently completed a Domain upgrade to 2012 R2 AD DS from native 2003 AD. The issue we are experiencing is that for seemingly no reason the 2012 hosts will randomly stop accepting (RDP) logins and we see replication failures. We also cannot
otherwise remotely manage the host (remote service management etc...). The only way I've been able to recover from this condition is to restart the affected host, after which (RDP) logins are again accepted and successful replication starts again.
Logs aren't showing any issues prior to the issue happening and it is not specific to one host. I have been digging around to find a solution to this abnormal behavior but as yet haven't come across anything specific to what I am seeing.
Domain level is 2008 R2 and our few remaining 2008 R2 hosts never experience this. Only seems to be the 2012 hosts and randomly among all the DCs. Not one specific 2012 host is affected.
We have 20 DCs total.
Are there any known issues? Any advice on what I may be able to look at?
We are otherwise healthy aside from this intermittent replication/login issue.

This sounds more like a network type issue than AD type problem.
Are any firewalls in the way?
Do the servers respond to a ping when they are not responding to RDP.
What are you seeing in event logs prior to the change.
Are the servers physical or virtual? Are you able to get onto the console - either through your HyperVisor or through ILO type management?
Thanks
Regards,
Denis Cooper
MCITP EA - MCT
Help keep the forums tidy, if this has helped please mark it as an answer
Blog: http://www.windows-support.co.uk
Twitter: LinkedIn:

Block Based replication of Domain Controllers to DR site

I have to bring up a business critical application at a DR site using the same hostname and IP address as in production site. For this purpose, I plan to use a block replication software to replicate data from production servers to a SAN at the DR site.
For DR invocation or testing, I am planning to take a snapshot from the SAN, create virtual disks and attach them to newly created VM's at the DR site.
This application depends on Active Directory and hence I need to have a domain controller at the DR site. If I create a new domain controller for the DR site, as it will be in a separate IP subnet, it will have to be in a separate AD site and the application
servers will not be able to use this domain controllers, as they will look for domain controllers in their AD site (which is from the production site). If I put the domain controller in the same IP subnet as the application servers, the same IP subnet has
user workstations and hence user authentication requests from production site will start coming to the DR site across the WAN.
In this scenario, I am proposing to replicate the domain controllers also from the production site to the DR site, like the application servers. But I am not sure if block replication of production DC's to DR site and then when required for testing/invocation,
can we create a new VM and attaching virtual hard disks with the replicated data, will bring these VM's up as domain controllers in the DR site or will they have any negative effects ? Would this be a supported solution ? Any response will be highly appreciated.
Thanks in advance.

You don't want to run any type of duplicated software to clone the DC, that is a bad idea. You could end up with lingering objects and/or Directory Service corruption.
If you want the DC's to exist in the same subnet then you are in a quandry. You can start to modify srv records so the DC won't authenticate clients (BUt you will have to manually change that at DR time).
I have a Blog that talks about lag site replication that blocks clients from ever attempting to authenticate to the DC, you should be able to use this same logic.
http://blogs.dirteam.com/blogs/paulbergson/archive/2013/05/14/how-to-build-an-ad-replication-delay-lag-site.aspx
You will want to create yourself a group policy that prevents the DC in the DR site from registering records that will advertise itself as an authenticating DC. If you need to use the DR site, you will need to remove the gpo and either reboot the DC
or run a gpupdate and restart NetLogon on the DC so it will register the records so the clients can then use this DC.
Paul Bergson
MVP - Directory Services
MCITP: Enterprise Administrator
MCTS, MCT, MCSE, MCSA, Security, BS CSci
2012, 2008, Vista, 2003, 2000 (Early Achiever), NT4
Twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson
Please no e-mails, any questions should be posted in the NewsGroup.
This posting is provided AS IS with no warranties, and confers no rights.

SRM 7.0 Modify POWL for shopping cart check status screen

HI Experts,
The standard settings in check status for SC in SRM 7.0 is to display the sc with item level. This causes the SC number to be repeated (for no. of items in SC) and all links open the same SC in a new window.
We want to display only the header of SC and no item data should be displayed in check status.
I tried
SRM Server->Cross-Application Basic Settings->POWL and Advance Search->Adjust POWL Layout,search criteria and push buttons----choose feeder type SAPSRM_FEEDER_SC -double click field catalog-choose ITEM_DESCR, ITEM_NO, ITEM_STATUS---CHOOSE display and select HIDDEN COLUMN radio button.
This hides the corresponding columns but duplicate records are still showing.
Can some one please help?
Thanks,
Anubhav

Hi NM,
After performing the steps in first post for hiding item relevant fields you can filter the data displayed in the result by using the BADI /SAPSRM/BD_POWL_CHNG_SEL_RSLT .
In the BADI Delete the records from result internal table where SC num is repeated so that thers only one entry for each SC.
Let me know if it works for you or not.
BR,
Anubhav

Multiple Domain Controllers, different sites, checking status for replication

Similar Messages

Maybe you are looking for