How to check Microsoft AD Synchronization between DC

repadmin /syncall /AePdq

/A= perform syncall for all NC (naming contexts) held by DC

/e = Enterprise , cross sites

/P = Push changes outward from home server

/d = Id servers by DN in messages instead of GUID

/q = suppress callback messages

repadmin / syncall /Aedq

Next run DCDIAG on the DC and look for any errors.

Also, look in the event log for any errors during.

From the webNetwork server use the LDP.exe tool from Microsoft and run it from the webNetwork server and try to connect to each DC's LDAP server and Global Catalog ports. Here is an article on LDP.exe

This set of steps was in response to an error a customer was getting when they tried to create a webApplication. The error in the wireshark trace was : 000020E1: SvcErr: DSID-03200674, problem 5002 (UNAVAILABLE), data 0

This indicates an issue with the global catalog when webAdmin went to modify the webapplication attributes.

Some additional information

Replication Health Best Practices

REPADMIN

/SHOWREPL

* Also display's DC's GUID

/REPLICATE - force replication of an NC

/SYNCALL - syncs a DC wit its partners

/DSAGUID - Resolves DC name from GUID

* This is handy for cound not establish a replication link error.

/QUEUE - display a DC's replication queue

Check replication regularly with /REPSLSUMMARY

Every DC Hosts its own secure integrated DNS

* DC's primary DNS client pointing to itself (127.0.0.1)

* If you suspect a dns problem point to a known good dns

Make sure DCs are either current or removed.

To format the list for REPADMIN a little nicer you can do:

repadmin /replsummary /bysrc /bydest /sort:delta

NLTEST

nltest /dsgetdc:<domain>

Example : nltest /dsgetdc:example-cloud.com

dcdiag /test:dns /e /v > output.txt

/e - every dc in the forest

/v - verbose output

> output.txt - send output to txt file

Look for results of the 6 tests.

Auth - Authentication

Basc - Basic connectivity

Forw - forwarders configuration

Del - dynameic registrtation

Rreg - resource record registration

Ext - external connectivity outside of the zone