Habilitar / Deshabilitar réplicas de Directorio Activo

Turn on inbound replicationUpdated:

Applies To: Windows Server 2008, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

You can use this procedure to turn on inbound replication after it has been turned off manually.

Administrative credentials

To complete this procedure, you must be a member of the Domain Admins group in the domain of the domain controller whose replication you are enabling, or you must be a member of the Enterprise Admins group.

To turn on inbound replication
1.Open a Command Prompt.

2.Type the following command, and then press ENTER:

repadmin /options ServerName -DISABLE_INBOUND_REPL

where ServerName is the network basic input/output system (NetBIOS) name of the domain controller.

3.Verify that the option is set. The following message should appear:

Current DC options: DISABLE_INBOUND_REPL

New DC Options:

Current DC Options displays the conditions that were in effect at the time that you ran the command. New DC Options shows the effect of the command, which is that the option to disable replication is not set.


Turn off inbound replicationUpdated:

Applies To: Windows Server 2008, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

You can use this procedure to turn off inbound replication so that objects on a domain controller cannot be updated by replication from another domain controller.

Administrative credentials

To complete this procedure, you must be a member of the Domain Admins group in the domain of the domain controller whose replication you are disabling, or you must be a member of the Enterprise Admins group.

To turn off inbound replication
1.Open a Command Prompt.

2.Type the following command, and then press ENTER:

repadmin /options ServerName +DISABLE_INBOUND_REPL

where ServerName is the network basic input/output system (NetBIOS) name of the domain controller.

3.Verify that the option is set. The following message should appear:

New DC Options: DISABLE_INBOUND_REPL

Error 8457 The destination server is currently rejecting replication requests

Si tu ejecutas "repadmin /showreps" ves este error:

"Can't retrieve message string 8456 (0x2108), error 1815"

Additional Data
Error value:
8457 The destination server is currently rejecting replication requests.


Ejecuta estos comandos

repadmin /options dcname -disable_inbound_repl

repadmin /options dcname -disable_outbound_repl

Después ejecuta "repadmin /showreps" o abre el Replication Monitor

Group Policy Settings References for Windows and Windows Server

Estimados todos,
aquí os dejo un enlace donde podréis descargar todos los settings de políticas de grupo para Windows y Windows Server.

Group Policy Settings References for Windows and Windows Server
Brief Description
These spreadsheets list the policy settings for computer and user configurations included in the Administrative template files delivered with the Windows operating systems specified. You can configure these policy settings when you edit Group Policy objects (GPOs).

Overview
Using column filters, you can filter the information in these spreadsheets by operating system, component, or computer or user configuration. You can also search for information by using text or keywords.
These spreadsheets include the following categories of security policy settings: Account Policies (Password Policy, Account Lockout Policy, and Kerberos Policy), Local Policies (Audit Policy, User Rights Assignment, and Security Options), Event Log, Restricted Groups, System Services, Registry, and File System policy settings. These spreadsheets do not include security settings that exist outside of the Security Settings extension (scecli.dll), such as Wireless Network extension, Public Key Policies, or Software Restriction Policies.

Group Policy Settings Reference for Windows Server 2008 R2 and Windows 7: This spreadsheet lists the policy settings for computer and user configurations included in the Administrative template files (.admx/.adml) delivered with Windows Server 2008 R2 and Windows 7. The policy settings included in this spreadsheet cover Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista with SP1, Windows Server 2003 with SP2 and earlier service packs, Windows XP Professional with SP2 and earlier service packs, and Windows 2000 with SP4 and earlier service packs.
Group Policy Settings Reference for Windows Server 2008 and Windows Vista Service Pack 1: This spreadsheet lists the policy settings for computer and user configurations included in the Administrative template files (.admx/.adml) delivered with Windows Server 2008 and Windows Vista with Service Pack 1 (SP1). The policy settings included in this spreadsheet cover Windows Server 2008, Windows Vista with SP1, Windows Server 2003, Windows XP Professional with SP2 or earlier service packs, and Windows 2000 with SP4 or earlier service packs.
Group Policy Settings Reference for Windows Vista: This spreadsheet lists the policy settings for computer and user configurations included in the Administrative template files (.admx/.adml) delivered with Windows Vista with no service packs installed. The policy settings included in this spreadsheet cover Windows Vista, Microsoft Windows Server 2003, Windows XP Professional with SP2 or earlier service packs, and Windows 2000 with SP4 or earlier service packs.
Group Policy Settings Reference for Windows Server 2003 Service Pack 2: This spreadsheet lists the policy settings for computer and user configurations included in the Administrative template (.adm) files and Security Settings that shipped with Windows Server 2003 with SP2. The policy settings included in this spreadsheet cover Microsoft Windows Server 2003 with SP2 or earlier service packs, Windows XP Professional with SP3 or earlier service packs, and Microsoft Windows 2000 with SP4 or earlier service packs.
This spreadsheet includes separate worksheets for each of the .adm files and the security policy settings that shipped in Windows XP SP3, a consolidated worksheet for easy searching, and an Update History worksheet that lists policy settings that have been added since the Windows Server 2003 operating systems were released.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=18c90c80-8b0a-4906-a4f5-ff24cc2030fb

Uso de repadmin para resolución de problemas de réplica de Directorio Activo

A continuación voy a mostrar varias sentencias de repadmin del kit de recursos para resolución de problemas de replicación de directorio activo:

1) Ver los socios de réplica de un controlador de dominio

repadmin /showrepl server1.microsoft.com

Resultados:
repadmin /showrepl server1.microsoft.com
Building7a\server1
DC Options : IS_GC
Site OPtions: (none)
DC object GUID : 405db077-le28-4825-b225-c5bb9af6f50b
DC invocationID: 405db077-le28-4825-b225-c5bb9af6f50b

==== INBOUND NEIGHBORS ======================================

CN=Schema,CN=Configuration,DC=microsoft,Dc=com
Building7b\server2 via RPC
objectGuid: e55c6c75-75bb-485a-a0d3-020a44c3afe7
last attempt @ 2002-09-09 12:25.35 was successful.


CN=Configuration,DC=microsoft,Dc=com
Building7b\server2 via RPC
objectGuid: e55c6c75-75bb-485a-a0d3-020a44c3afe7
last attempt @ 2002-09-09 12:25.10 was successful.


DC=microsoft,Dc=com
Building7b\server2 via RPC
objectGuid: e55c6c75-75bb-485a-a0d3-020a44c3afe7
last attempt @ 2001-09-09 12:25.11 was successful.


2) Ver los Números de Secuencia de Actualización (USN) más altos en un servidor para una partición determinada


repadmin /showutdvec . dc=microsoft,dc=com server2.microsoft.com

Resultados:
repadmin running command /showutdvec against server localhost

Caching GUIDs.
..
Building7b\Server1 @ USN 295458 @ Time 2002-09-09 19:33:42
Building7b\Server2 @ USN 338194 @ Time 2002-09-09 19:38:16

3) Ver los cambios sin replicar entre dos servidores

repadmin /showchanges server2.microsoft.com ObjectGUID dc=microsoft,dc=com

donde el ObjectGUID Ejemplo: 5c02bcaf-86d9-4bed-811e-d17a5cebf8bb hay que reemplazarlo por el ObjectGUID de la partición de directorio del servidor origen

Resultados:

repadmin /showchanges server2.microsoft.com 5c02bcaf-86d9-4bed-811e-d17a5cebf8bb dc=microsoft,dc=com

server2.microsoft.com
Building starting position from destination server rktlabdc2.rktlabdom.com

Source Neighbor:
dc=microsoft,dc=com
==== INBOUND NEIGHBORS ======================================

dc=microsoft,dc=com
Building7b\Server1 via RPC
DC object GUID: 5c02bcaf-86d9-4bed-811e-d17a5cebf8bb
Address: 5c02bcaf-86d9-4bed-811e-d17a5cebf8bb._msdcs.microsoft.com
DC invocationID: 064152bc-f8e8-404f-bd64-cdd9bb3958cb
SYNC_ON_STARTUP DO_SCHEDULED_SYNCS WRITEABLE
USNs: 296048/OU, 296048/PU
Last attempt @ 2002-09-09 20:03:53 was successful.

Destination's up-to-date vector:
064152bc-f8e8-404f-bd64-cdd9bb3958cb @ USN 296163
fea22f1d-a456-4f70-aa06-bedbda29e7eb @ USN 338287

==== SOURCE DC: 5c02bcaf-86d9-4bed-811e-d17a5cebf8bb._msdcs.microsoft.com ====

No Changes

4) Ver el estado de replicación de los controladores de dominio en un bosque

repadmin /replsummary FOURTH*

Resultados:
repadmin /replsummary FOURTH*
Replication Summary Start Time: 2002-09-18 14:54:49

Beginning data collection for replication summary, this may take awhile:

Source DC largest delta fails/total %% error
FOURTH-CLT-DC-01 54m:57s 0 / 9 0
FOURTH-DC-05 41m:23s 0 / 175 0
FOURTH-DC-06 55m:08s 0 / 66 0
FOURTH-DC-07 09m:29s 0 / 97 0
FOURTH-DC-08 18h:05m:02s 56 / 56 100 (1722) The RPC server is unavailable.
FOURTH-DC-09 56m:47s 0 / 12 0
FOURTH-DC-10 55m:10s 0 / 13 0
FOURTH-DC-11 56m:48s 0 / 46 0
FOURTH-DC-12 57m:09s 0 / 34 0
FOURTH-DC-13 55m:52s 0 / 64 0
FOURTH-DC-14 55m:52s 0 / 85 0
FOURTH-DC-15 09m:21s 0 / 50 0
FOURTH-DC-16 58m:02s 0 / 37 0
FOURTH-DC-17 57m:00s 0 / 48 0
FOURTH-DC-18 57m:00s 0 / 22 0
FOURTH-DC-19 58m:02s 0 / 22 0
FOURTH-DC-20 08m:05s 0 / 22 0
FOURTH-DC-21 05m:43s 0 / 22 0
FOURTH-DC-22 09h:06m:29s 0 / 199 0
FOURTH-DC-23 09m:29s 0 / 34 0
FOURTH-DC-24 56m:48s 0 / 184 0
FOURTH-DC-25 41m:22s 0 / 71 0
FOURTH-DC-26 08m:16s 0 / 108 0
FOURTH-DC-30 55m:13s 0 / 47 0
FOURTH-DC-31 41m:23s 0 / 56 0
FOURTH-SVC-DC-40 57m:02s 0 / 9 0
FOURTH-TK-DC-27 07m:02s 0 / 54 0
FOURTH-TK-DC-28 08m:01s 1 / 161 0 (8461) The replication operation was preempted.
FOURTH-TK-DC-29 55m:10s 0 / 115 0

Experienced the following operational errors trying to retrieve replication information:
58 - fourth-dc-08.fourthcoffee.com

http://technet.microsoft.com/en-us/library/cc773062.aspx