How to make AD replication instantaneously

[Wei Peng]

We have two DC located in different physical locations, we initially set up
two AD sites to hold one AD each.

One of application running on both sites requires new created AD users show
up on both DC instantaneously, but inter-site replication happens at least
every 15 minutes, so we condensed both DC into one site, and set following
registry key to zero, let AD replication occur immediately:

HKLM>system>currentControlset>services>NTDS>Parameters>Replicator Notify
Pause After Modify

But so far, this doesn't happen, the user information was sync'ed in
variable time, like 5 minutes, 15 minutes, I don't know what timing it
follows. How can I make AD replicate right the way?

Wei

 

[Chris Malone]

This issue has come up plenty of times. AD is designed to be
multimaster with "loose" replication consistency. You will never reach
absolute zero replication latency.

See the following -

http://www.microsoft.com/Resources/...echref/en-us/w2k3tr_repup_what.asp?frame=true
http://www.microsoft.com/Resources/...techref/en-us/w2k3tr_repup_how.asp?frame=true


Chris Malone
Microsoft Directory Services

 

[Eric Fleischman [MSFT]]

But if you want to get as close as you can, you could enable notifications
across the site links. I would ensure you have enough bandwidth to support
this (depending upon your order of change) you could get latency <15 minutes
for sure. If you have enough bandwidth and server horse power I've seen
people in the 30 second range for latency after that change.

~Eric

 

[Wei Peng]

How can you do that? I already moved both domain controllers into the same
AD site, which is supposed to ahve quicker convergence that intersite
replication, surely if we can minimize the latency as we can, I can see if
it is good enough for the application.

Wei

 

[Eric Fleischman [MSFT]]

I'm looking for a doc....if someone else knows of one before I dig one up
please post it.


--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

 

[Simon Geary]

If the two DC's are already in the same site this kb explains how to change
the default replication interval.
http://support.microsoft.com/?id=214678

And this link explains how to do it inter-site.
http://www.microsoft.com/windows200...chinfo/reskit/en-us/distrib/dsbh_rep_hnvb.asp

 

[Eric Fleischman [MSFT]]

There's the intersite link! Thanks Simon. I couldn't find it for the life of
me......

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm