Active Directory replication failing with Access is Denied
- by Justin Love
I recently discovered that Active Directory replication started failing about a month ago. If I attempt to Replicate Now from the failing domain controller, I receive The following error occurred during the attempt to synchronize the domain controllers: Access is denied.
It is between two servers at a remote site. One is Windows 2003 and the other is Windows 2000; the Windows 2000 machines is experiencing the errors. The domain is older OUR_DOMAIN style.
Attempts so far:
I disabled Kerberos service on the Windows 2000 server and restarted
RPC and RPC locater services have expected settings
HKEY_Local_Machine\Software\Microsoft\Rpc\ClientProtocols missing ncacn_nb_tcp on Windows 20003 server (added)
Portqry reports okay
Firewall disabled
netdom resetpwd (and reboot) on Windows 2000 server.