When you perform replication among Active Directory Lightweight Directory Services (AD LDS) instances on a Windows Server 2008-based computer, the replication process may fail

Article translations Article translations
Article ID: 947055 - View products that this article applies to.
Beta Information
This article discusses a beta release of a Microsoft product. The information in this article is provided as-is and is subject to change without notice.

No formal product support is available from Microsoft for this beta product. For information about how to obtain support for a beta release, see the documentation that is included with the beta product files, or check the Web location where you downloaded the release.
Expand all | Collapse all

SYMPTOMS

On a Windows Server 2008-based computer, you perform replication among Active Directory Lightweight Directory Services (AD LDS) instances. When you do this, the replication process may fail.

CAUSE

This problem may occur if you change the service accounts of two or more AD LDS instances at the same time in the same configuration context. These AD LDS instances may encounter issues when these AD LDS instances authorize one another for replication. These issues occur because the permissions of the new service accounts are not set appropriately in all the AD LDS instances.

For example, AD LDS instance 1 is running under service account A, and AD LDS instance 2 is running under service account B. If you change the service account of AD LDS instance 1 from service account A to service account X, AD LDS instance 2 updates the permissions for service account X. Then, AD LDS instance 2 authorizes AD LDS instance 1 when the replication starts. However, if you change the service account of AD LDS instance 2 from service account B to service account Y before the replication starts, AD LDS instance 1 and AD LDS instance 2 cannot authorize one another. This behavior occurs because the permissions of service account X and of service account Y are not updated.

RESOLUTION

To resolve this problem, do not change the service accounts of two or more AD LDS instances at the same time in the same configuration context.

Properties

Article ID: 947055 - Last Review: February 8, 2008 - Revision: 1.2
APPLIES TO
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Standard
Keywords: 
kbexpertiseinter kbtshoot kbprb KB947055

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com