errors with dcdiag on our domain servers - ncsecdesc is failing

JB306yxe 256 Reputation points
2021-12-28T17:19:03.587+00:00

ncsecdesc is failing
Error: Domain\Enterprise Read-only domain controllers doesn't have replicating directory changes
both domain servers are failing on this
DC1 is a Windows 2012R2 server
DC2 is a Windows 2019 server

Windows for business | Windows Server | User experience | Other
0 comments No comments
{count} votes

5 answers

Sort by: Most helpful
  1. Anonymous
    2021-12-28T18:14:33.483+00:00

    Might try a non authoritative synchronization
    https://support.microsoft.com/en-us/help/2218556/how-to-force-an-authoritative-and-non-authoritative-synchronization-fo

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  2. JB306yxe 256 Reputation points
    2021-12-29T20:16:58.46+00:00

    I just read through the steps and now I think that this is over my head and don't want to create issues with everything.
    Anything else that I can test before I make any changes?

    0 comments No comments

  3. Anonymous
    2021-12-29T20:18:19.047+00:00

    Please run;

    Dcdiag /v /c /d /e /s:%computername% >C:\dcdiag.log
    repadmin /showrepl >C:\repl.txt
    ipconfig /all > C:\dc1.txt
    ipconfig /all > C:\dc2.txt

    then put unzipped text files up on OneDrive and share a link.


  4. Anonymous
    2021-12-30T20:39:48.773+00:00

    Also try working through this one.
    https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/replication-error-8453

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  5. JB306yxe 256 Reputation points
    2022-01-19T21:17:44.043+00:00

    Hi all, just an update to this. I was able to work through this doc
    https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/replication-error-8453

    The first part under Top Solution was what fixed that issue.

    Thanks


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.