PDC Performs Only Full Synchronizations to BDCs

View products that this article applies to.

This article was previously published under Q197985

Expand all | Collapse all

SYMPTOMS

The primary domain controller (PDC) uses full synchronizations rather than partial synchronizations to update the backup domain controllers (BDCs) in the domain. This can be seen on the PDC's System Log as the following events:

   Event ID: 5712
   Source: NETLOGON
   Description: The partial synchronization request from the server
   <BDCName> failed with the following error:
   Data Section: 0000: 34 01 00 c0
   
   Event ID: 5713
   Source: NETLOGON
   Description: The full synchronization request from the server <BDCName>
   completed successfully. X object(s) has(have) been returned to the
   caller.

This problem can also be seen on the BDC's System Log as the following events:

   Event ID: 5716
   Source: NETLOGON
   Description: The partial synchronization replication of the LSA database
   from the primary domain controller <PDCname> failed with the following
   error:
   Data Section: 0000: 34 01 00 c0
   
   Event ID: 5717
   Source: NETLOGON
   Description: The full synchronization replication of the LSA database
   from the primary domain controller <PDCname> completed successfully.

Back to the top

CAUSE

This problem can be caused if the following three conditions exist:

"File and Object Access" auditing is enabled on the domain.
The Security Log on the PDC is full. The Security Log Settings on the primary domain controller default to "Maximum log size of 512 Kilobytes" and the Event Log Wrapping setting defaults to "Overwrite Events Older than 7 Days." The problem can also happen if the Event Log Wrapping setting is set to "Do Not Overwrite Events (Clear Log Manually)."
An application on the network is making multiple API calls in rapid succession to access SAM database information on the PDC.

Back to the top

RESOLUTION

Disable "File and Object Access" auditing on the domain within User Manager or change the Event Log Settings, Event Log Wrapping to "Overwrite Events as Needed" on the PDC.

Back to the top

STATUS

Microsoft has confirmed this to be a problem in Windows NT version 4.0. We are researching this problem and will post new information here in the Microsoft Knowledge Base as it becomes available.

Back to the top