I've got small lab - domain controllers and the whole lab was run at 2018, so I've received error, that tombstone lifetime is exceeded.
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" /v "Allow Replication With Divergent and Corrupt Partner" /t REG_DWORD /d 1 /f
Pokazywanie postów oznaczonych etykietą replication. Pokaż wszystkie posty
Pokazywanie postów oznaczonych etykietą replication. Pokaż wszystkie posty
2025-03-01
dns record timestamp in Active Directory partition
how to force AD to replicate timestamps? I can't use Scavanging - too many different objects - huge risk of loss of data, I can't enforce every device to reregister.
Idea to enable scavanging on zone is useless - as long as I will not run it on server level this setting is useless.
The only way is to remove stale records tracked by timestamp distributted accross thirty domain controllers (in four domains). We can recognize records from workstations (laptops, pc and virtual desktops) by ip addresses, but why it can be automated?
Idea to enable scavanging on zone is useless - as long as I will not run it on server level this setting is useless.
The only way is to remove stale records tracked by timestamp distributted accross thirty domain controllers (in four domains). We can recognize records from workstations (laptops, pc and virtual desktops) by ip addresses, but why it can be automated?
Subskrybuj:
Posty (Atom)