When you disable an account, make a password change, etc. the DC that you
made this change on immediately sends a notification trigger to the PDCe.
This is known as an urgent notification trigger. This is only between the
originating DC and the PDCe however. After that, changes replicate normally
from the PDCe and the originating DC.
If you make this change on a site, the DC will notify the PDCe. Other sites
still won't replicate this until normal replication interval. However, if
you type a password in that's different to that the DC holds, the DC queries
the PDCe. Therefore password changes, and lockouts are immediate even if
not all DCs are in full sync.
See my other post regarding intersite change notification if you're worried
about this. However, you should also follow Ryan's advice about making
changes locally, i.e. on the DC in the local site if you can.
--
Paul Williams
http://www.msresource.net/
http://forums.msresource.net/
I have 3 sites. One site appears to be updating things like disabled
account very quickly while the other site takes a very long time to reflect
the changes. I have deleted the AD Sites & Services connections and let
Windows recreate them but this has not made a difference. The site that is
reponding slowly to changes is also on a much faster link.
Any ideas?
Thanks Johnny