Verifying Domain Netlogon Synchronization

MORE INFORMATION

In User Manager, changing any of the following requires a complete domain synchronization for all domain controllers in the domain to be able to correctly service the Netlogon request:

• Creating a new user or group account
• Changing a password or description
• Changing domain or user policies
• Changing group membership
• Changing logon script file name
• Changing home directory path
• Changing hours of valid logon
• changing the list of valid machines to be validated against
• Changing account expiration and type

In Server Manager, doing any of the following requires a complete domain synchronization for all domain controllers in the domain to be able to correctly service the Netlogon request:

• Creating a new computer account for a Workstation
• Creating a new computer account for a stand-alone Server
• Creating a new computer account for a backup domain controller

In the case where the PDC has to be taken offline, full replication will need to have already occurred before promotion of a BDC to PDC. If the synchronization did not occur, any new information not replicated is lost.

To verify Domain Synchronization, individually replicate the User Account Database on each backup domain controller with the primary domain controller.

From within Server Manager, select each BDC in turn and, from the Computer menu, choose "Synchronize with primary domain controller." This will trigger an immediate replication for the selected BDC with the PDC.

From the Event Log on each Domain Controller, verify that one or more of the following is on each server (both event IDs do not need to be present on each computer):

On the PDC:

On the BDC: