Introduction. Objects that are stored in Active Directory may become stale, corrupt, or orphaned caused by replication conflicts. This article focuses on trust objects which can be identified by the “INTERDOMAIN_TRUST_ACCOUNT” bit in the userAccountControl attribute. For detailed information on this bit, see userAccountControl Bits.. Symptoms

The membership must include these groups for each domain that has computers that will replicate over SMTP connections. For example, assume that you have a domain A.com and a child domain B.A.com. Additionally, assume that you want computers from both domains to replicate over SMTP connections.In this situation, you must include the following groups as members of the Certificate Service DCOM ...

In Active Directory Sites and Services, duplicate Active Directory replication connections are created for one or more domain controllers across one or more sites.

You reconnect the mailbox. Note To reconnect the mailbox, start the Exchange Management Console (EMC) in the Disconnected Mailbox node. To complete the operation, click the Finish button when you receive the following warning message:

More Information. In a scenario where a third-party DNS server is configured as secondary for an Active Directory-integrated zone, the first (preferred) master server becomes unavailable, and the secondary server attempts a zone transfer from another primary server for the zone, then the secondary DNS server (by using IXFR) may not notice that the zone was updated if the serial number of the ...

Summary. Windows Backup, the backup tool that is included with Microsoft Windows Server 2003 and with Microsoft Windows 2000, can back up and restore Active Directory on Windows Server 2003 or Windows 2000 domain controllers.

INTRODUCTION . Distributed File System (DFS) replication uses the Active Directory directory service to store configuration objects. When you use Active Directory, you can delegate user rights more exactly.

Symptoms. Assume that you define a static TCP port on which the NTDS service listens and responds to incoming remote procedure calls (RPCs). In this situation, Active Directory replication may fail with an RPC issue.

The default value for the RPC Replication Timeout (mins) registry setting on Windows 2000-based computers is 45 minutes. The default value for the RPC Replication Timeout (mins) registry setting on Windows Server 2003-based computers is 5 minutes.

More Information. Event 1119 may be logged in the Directory Services log on the domain controller. This event may be logged after you assign the role of global catalog server to the domain controller, and after the account and the schema information is replicated to the new global catalog server.