I know it’s one from the past, but today I just couldn’t found instructions quick enough. So I decided to write instructions by my own and poste them.
There are few ways (links are at the bottom of this page) how to enable strict replication consistency in AD but this one will solve this issue permanently 🙂
How can we do that you’re thinking. By using Group Policy (GPO) of course 🙂
And how do we do that? Well, here you have it.
Step 01: Open Group Policy Management console
Step 02: Create new Group Policy for Domain Controllers OU
Step 03: Give name to new Group Policy (for example EnableStrictReplicationConsistency)
Step 04: Edit new Group policy
Step 05: Browse to Computer Configuration – Preferences – Windows Settings and right click on Registry. Select New – Registry Item
Step 06: Under Key path browse to registry path HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Services\NTDS\Parameters and click Select
Step 08: Stop editing new Group Policy by closing Group Policy Management Editor window
Step 10: Open registry editor and check that new registry key (Strict replication consistency) was created under HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\Services\NTDS\Parameters with value 1.
So from now on all of your DC’s will have strict replication consistency setting enabled 🙂
Few links to help you understand and configure this setting:
– Enable Strict Replication Consistency
– AD DS: Strict replication consistency should be enabled on all domain controllers in this forest
– Event ID 1388 or 1988: A lingering object is detected
– Fixing Replication Lingering Object Problems (Event IDs 1388, 1988, 2042)