Replication Stops After Active Directory Schema Update

View products that this article applies to.

This article was previously published under Q307219

Expand all | Collapse all

SYMPTOMS

After you update the Active Directory schema in a Windows 2000 forest, replication between domain controllers stops while the indexes are rebuilt and the schema cache is updated.

In a large Active Directory forest, this delay may be significant. The domain controllers may not be able to restart the replication process for several hours.

Back to the top

CAUSE

This behavior occurs because the schema cache update and the reindexing process are synchronous operations. Synchronous operations require precise timing and a fixed timing signal. This timing requirement can stop nearly all other processor activities until the operation is complete.

Back to the top

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 (http://support.microsoft.com/kb/260910/EN-US/ ) How to Obtain the Latest Windows 2000 Service Pack

The English-language version of this fix should have the following file attributes or later:

   Date          Version         Size      File name     
   -----------------------------------------------------------
   06-Sep-2001   5.0.2195.4301   507,152   Lsasrv.dll (56-bit)
   09-Oct-2001   5.0.2195.4472   123,664   Adsldp.dll
   09-Oct-2001   5.0.2195.4308   130,832   Adsldpc.dll
   09-Oct-2001   5.0.2195.4016    62,736   Adsmsext.dll
   09-Oct-2001   5.0.2195.4384   364,816   Advapi32.dll
   09-Oct-2001   5.0.2195.4141   133,904   Dnsapi.dll
   09-Oct-2001   5.0.2195.4379    91,408   Dnsrslvr.dll
   09-Oct-2001   5.0.2195.4437   145,680   Kdcsvc.dll
   04-Oct-2001   5.0.2195.4471   199,440   Kerberos.dll
   04-Sep-2001   5.0.2195.4276    71,024   Ksecdd.sys
   27-Sep-2001   5.0.2195.4411   511,248   Lsasrv.dll
   06-Sep-2001   5.0.2195.4301    33,552   Lsass.exe
   27-Sep-2001   5.0.2195.4285   114,448   Msv1_0.dll
   09-Oct-2001   5.0.2195.4153   312,080   Netapi32.dll
   09-Oct-2001   5.0.2195.4357   370,448   Netlogon.dll
   09-Oct-2001   5.0.2195.4464   912,656   Ntdsa.dll
   09-Oct-2001   5.0.2195.4433   387,856   Samsrv.dll
   09-Oct-2001   5.0.2195.4117   111,376   Scecli.dll
   09-Oct-2001   5.0.2195.4476   299,792   Scesrv.dll
   09-Oct-2001   5.0.2195.4025    50,960   W32time.dll
   01-Aug-2001   5.0.2195.4025    56,592   W32tm.exe
   09-Oct-2001   5.0.2195.4433   125,712   Wldap32.dll

Back to the top

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 3.

Back to the top

MORE INFORMATION

This fix changes the update behavior so that when a new indexed attribute is added, the domain controller with the fix installed on it does not search the whole database to create an empty index. This allows Active Directory replication to restart earlier.

For additional information about how to obtain a hotfix for Windows 2000 Datacenter Server, click the article number below to view the article in the Microsoft Knowledge Base:

265173 (http://support.microsoft.com/kb/265173/EN-US/ ) The Datacenter Program and Windows 2000 Datacenter Server Product

For additional information about how to install multiple hotfixes with a single restart, click the article number below to view the article in the Microsoft Knowledge Base:

296861 (http://support.microsoft.com/kb/296861/EN-US/ ) Use QChain.exe to Install Multiple Hotfixes with One Reboot

Back to the top