AD Replication and Authentication Problems - pls help

  • Thread starter Thread starter NoNameHere
  • Start date Start date
Some thoughts -

No need to worry about WINS, AD doesn't use it. WINS/NetBIOS name resolution issues will never break AD replication

The fact that connection by IP works but by name fails usually indicates Kerberos is failing (when you connect by IP that forces NTLM authentication to be used).

And if Kerberos is failing you may be suffering from fragmentation of Kerberos packets. There is a KB on that, query on MaxPacketSize and use 1465 for the value when you set it.

The 12292 is telling you there are conflicting objects. And the DN shows them to be in the Users container, so check all three DCs for this, and delete the one that is in conflict
 
Back
Top