How to enable strict replication consistency in AD


I know it’s one from the past, but today I just couldn’t found instructions quick enough. So I decided to write instructions by my own and poste them.

There are few ways (links are at the bottom of this page) how to enable strict replication consistency in AD but this one will solve this issue permanently 🙂

How can we do that you’re thinking. By using Group Policy (GPO) of course 🙂

And how do we do that? Well, here you have it.

Step 01: Open Group Policy Management console

Step 02: Create new Group Policy for Domain Controllers OU

Step 03: Give name to new Group Policy (for example EnableStrictReplicationConsistency)

Step 04: Edit new Group policy

Step 05: Browse to Computer ConfigurationPreferencesWindows Settings and right click on Registry. Select NewRegistry Item

Step 06: Under Key path browse to registry path HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Services\NTDS\Parameters and click Select

Step 07: Under Value Name type “Strict replication consistency“. Under Value Type select REG_DWORD and under Value Data enter 1 (select Base decimal). Confirm new settings by clicking on OK button

Step 08: Stop editing new Group Policy by closing Group Policy Management Editor window

Step 09: Force applying group policies by typing “gpupdate /force” in Command Prompt

Step 10: Open registry editor and check that new registry key (Strict replication consistency) was created under HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Services\NTDS\Parameters with value 1.

So from now on all of your DC’s will have strict replication consistency setting enabled 🙂

Few links to help you understand and configure this setting:
Enable Strict Replication Consistency
AD DS: Strict replication consistency should be enabled on all domain controllers in this forest
Event ID 1388 or 1988: A lingering object is detected
Fixing Replication Lingering Object Problems (Event IDs 1388, 1988, 2042)

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: