errors with dcdiag on our domain servers - ncsecdesc is failing

JB306yxe 256 Reputation points
2021-12-28T17:19:03.587+00:00

ncsecdesc is failing
Error: Domain\Enterprise Read-only domain controllers doesn't have replicating directory changes
both domain servers are failing on this
DC1 is a Windows 2012R2 server
DC2 is a Windows 2019 server

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
10,656 questions
0 comments No comments
{count} votes

5 answers

Sort by: Most helpful
  1. Dave Patrick 395.3K Reputation points MVP
    2021-12-28T18:14:33.483+00:00

    Might try a non authoritative synchronization
    https://support.microsoft.com/en-us/help/2218556/how-to-force-an-authoritative-and-non-authoritative-synchronization-fo

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  2. JB306yxe 256 Reputation points
    2021-12-29T20:16:58.46+00:00

    I just read through the steps and now I think that this is over my head and don't want to create issues with everything.
    Anything else that I can test before I make any changes?

    0 comments No comments

  3. Dave Patrick 395.3K Reputation points MVP
    2021-12-29T20:18:19.047+00:00

    Please run;

    Dcdiag /v /c /d /e /s:%computername% >C:\dcdiag.log
    repadmin /showrepl >C:\repl.txt
    ipconfig /all > C:\dc1.txt
    ipconfig /all > C:\dc2.txt

    then put unzipped text files up on OneDrive and share a link.


  4. Dave Patrick 395.3K Reputation points MVP
    2021-12-30T20:39:48.773+00:00

    Also try working through this one.
    https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/replication-error-8453

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  5. JB306yxe 256 Reputation points
    2022-01-19T21:17:44.043+00:00

    Hi all, just an update to this. I was able to work through this doc
    https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/replication-error-8453

    The first part under Top Solution was what fixed that issue.

    Thanks