Troubleshooting AD Replication error 1818: The remote procedure call was cancelled

Applies to: Windows Server, version 2004, all editionsWindows Server, version 1903, all editionsWindows Server 2019, all editions


Home users: This article is only intended for technical support agents and IT professionals. If you're looking for help with a problem, please ask the Microsoft Community.


This article describes the symptoms, cause, and resolution steps when Active Directory replication fails with error 1818: The remote procedure call was cancelled (RPC_S_CALL_CANCELLED)


1.      Possible formats for the error include:

DecimalHexSymbolicError string
18180x71aRPC_S_CALL_CANCELLEDThe remote procedure call was cancelled.

2.      The following events get logged

Event SourceEvent IDEvent String
NTDS Replication1232Active Directory attempted to perform a remote procedure call (RPC) to the following server. The call timed out and was cancelled.
NTDS Replication1188A thread in Active Directory is waiting for the completion of a RPC made to the following domain controller.

Domain controller:


get changes

Thread ID:


Timeout period (minutes):


Active Directory has attempted to cancel the call and recover this thread.

User Action

If this condition continues, restart the domain controller.

NTDS Replication
1173 with error status 1818Internal event: Active Directory has encountered the following exception and associated parameters. Exception: e0010002 Parameter: 0 Additional Data Error value: 1818 Internal ID: 5000ede
NTDS Replication1085 with error status 1818Internal event: Active Directory could not synchronize the following directory partition with the domain controller at the following network address.

Directory partition: <NC>

Network address: <GUID-based DC name>

If this error continues, the Knowledge Consistency Checker (KCC) will reconfigure the replication links and bypass the domain controller.

User Action

Verify that the network address can be resolved with a DNS query.

Additional Data Error value: 1818 The remote procedure call was cancelled.



.      Repadmin /showreps displays  the following error message



<Sitename>\<DCname> via RPC DC

DC object GUID: b8b5a0e4-92d5-4a88-a601-61971d7033af Last attempt @ 2009-11-25 10:56:55 failed, result 1818 (0x71a): Can't retrieve message string 1818

(0x71a), error 1815. 823 consecutive failure(s). Last success @ (never).



3.      Repadmin /showreps from Domain Controller Name shows that its failing to pull Domain NC from

<SiteName> but can pull all other NC's


<Sitename>\<DC name>

DC Options: IS_GC


DC object GUID: d46a672b-f6be-431e-81c6-23b1f284f8c9

DC invocationID: 5d74f6b0-08f1-408a-b4d5-4759adafe219


==== INBOUND NEIGHBORS =====================================


<Sitename>\<DCname> via RPC DC

DC object GUID: b8b5a0e4-92d5-4a88-a601-61971d7033af

Last attempt @ 2011-11-11 10:45:49 failed, result 1818 (0x71a):

Can't retrieve message string 1818 (0x71a), error 1815. 123 consecutive

failure(s). Last success @ (never).


4.      DCPromo may fail while promoting a new domain controller and you will see the following error on the DCPROMO GUI

Active Directory Installation wizard.

The Operation Failed because:
Active Directory could not replicate the directory partition
CN=Configuration....from the remote domain controller “server name”
The remote procedure call was cancelled

The following entries will be logged in the DCPROMO logs


06/29/2010 22:31:36 [INFO] EVENTLOG (Informational): NTDS General / Service Control : 1004

Active Directory Domain Services was shut down successfully.


06/29/2010 22:31:38 [INFO] NtdsInstall for <FQDN fo the domain> returned 1818

06/29/2010 22:31:38 [INFO] DsRolepInstallDs returned 1818

06/29/2010 22:31:38 [ERROR] Failed to install to Directory Service (1818)

06/29/2010 22:31:38 [ERROR] DsRolepFinishSysVolPropagation (Abort Promote) failed with 8001

06/29/2010 22:31:38 [INFO] Starting service NETLOGON

06/29/2010 22:31:38 [INFO] Configuring service NETLOGON to 2 returned 0

06/29/2010 22:31:38 [INFO] The attempted domain controller operation has completed

06/29/2010 22:31:38 [INFO] DsRolepSetOperationDone returned 0



5.      While trying to re-host a partition on the Global catalog


 repadmin /rehost fail with DsReplicaAdd failed with status

1818 (0x71a)>

DsReplicaAdd fails with status 1818 (0x71a)


The issue occurs when the destination DC performing inbound replication does not receive replication changes within the number of seconds specified in the “RPC Replication Timeout” registry key. You might experience this issue most frequently in one of the following situations:

  • You promote a new domain controller into the forest by using the Active Directory Installation Wizard (Dcpromo.exe).
  • Existing domain controllers replicate from source domain controllers that are connected over slow network links.

The default value for the RPC Replication Timeout (mins) registry setting on Windows 2000-based computers is 45 minutes. The default value for the RPC Replication Timeout (mins) registry setting on Windows Server 2003-based computers is 5 minutes. When you upgrade the operating system from Windows 2000 to Windows Server 2003, the value for the RPC Replication Timeout (mins) registry setting is changed from 45 minutes to 5 minutes. If a destination domain controller that is performing RPC-based replication does not receive the requested replication package within the time that the RPC Replication Timeout (mins) registry setting specifies, the destination domain controller ends the RPC connection with the non-responsive source domain controller and logs a Warning event.

 Some specific root causes for Active Directory logging 1818 \ 0x71a \ RPC_S_CALL_CANCELLED include: 

  1. An old Network Interface Card driver installed on Domain Controllers could cause failure of a few network features like Scalable Networking Pack (SNP)
  2. Low bandwidth or network packets drops between source and destination domain controllers.
  3. The networking device between source and destination device dropping packets.

Note: A speed and duplex mismatch between the NIC and switch on a domain controller could cause dropped frames, resets, duplicate acknowledgements, and retransmitted frames.


1.       Increase replication time out adding the key RPC Replication Timeout (mins) on HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters

o    Start Registry Editor.

o    Locate the following registry subkey: 

o    Right-click Parameters, point to New, and then click DWORD Value.

o    Type RPC Replication Timeout (mins), and then press ENTER to name the new value.

o    Right-click RPC Replication Timeout (mins), and then click Modify.

o    In the Value data box, type the number of minutes that you want to use for the RPC timeout for Active Directory replication, and then click OK.


On a Windows Server 2003-based computer that is part of a Windows 2000 environment or that was upgraded from Windows 2000 Server, you may want to set this value to 45 minutes. This is value may depend on your network configuration and should be adjusted accordingly.

 Note You must restart the computer to activate any changes that are made to RPC Replication Timeout (mins)


2.      Update the network adapter drivers


To determine whether an updated network adapter driver is available, contact the network adapter manufacturer or the original equipment manager (OEM) for the computer. The driver must meet Network Driver Interface Specification (NDIS) 5.2 or a later version of this specification.

a.       To manually disable RSS and TCP Offload yourself, follow these steps:

·   Click Start, click Run, type regedit, and then click OK.

·   Locate the following registry subkey:

·   Right-click EnableTCPChimney, and then click Modify.

·   In the Value data box, type 0, and then click OK.

·   Right-click EnableRSS, and then click Modify.

·   In the Value data box, type 0, and then click OK.

·   Right-click EnableTCPA, and then click Modify.

·   In the Value data box, type 0, and then click OK.

·   Exit Registry Editor,

Note You must restart the computer to activate any changes that are made to EnableTCPChimney.;EN-US;948496


3.      Enable PMTU Black Hole Detection on the Windows-based hosts that will be communicating over a WAN connection. Follow these steps:

o    Start Registry Editor (Regedit.exe).

o    Locate the following key in the registry: 

o    On the Edit menu, click Add Value, and then add the following registry value: 

Value Name: EnablePMTUBHDetect
Data Type: REG_DWORD
Value: 1
Restart the machine


4.      Check the network binding order:


To configure the network binding order:

a.       Quit any programs that are running.

b.      Right-click Network Neighborhood, and then click Properties.

c.       Click the Bindings tab. In the Show Bindings For box, click All Services.

d.      Double-click each listed service to expand it.

e.       Under each service, double-click each protocol to expand it.

f.       Under each protocol, there is a number of network adapter icons. Click the icon for your network adapter, and then click Move Up until the network adapter is at the top of the list. Leave the "Remote Access WAN Wrapper" entries in any order under the network adapter(s).

Note If you have more than one network adapter, place the internal adapter (with Internet Protocol [IP] address by default on a Small Business Server network) at the top of the binding order, with the external adapter(s) directly below the internal adapter.

The final order should appear similar to:
[1] Network adapter one
[2] Network adapter two (if present)
[3] Remote Access WAN Wrapper
[n] Remote Access WAN Wrapper

g.       Repeat step 6 for each service in the dialog box.

h.      After you have verified the settings for each service, click All Protocols in the Show Bindings For box. The entry for "Remote Access WAN Wrapper" does not have a network adapter listed. Skip this item. Repeat steps 4 through 6 for each remaining protocol.

i.        After you have verified that the bindings are set correctly for all services and protocols, click OK. This initializes the rebinding of the services. When this is complete, you are prompted to restart the computer. Click Yes.