Manually Replicating Directory Partitions

Revision as of 20:52, 12 May 2017 by Mmuehlfeld (talk | contribs) (Added admonition about replication agreements. Minor other changes.)

Introduction

In certain situations, it is necessary to manually force a replication for an Active Directory (AD) partition between two domain controllers (DC).



Manually Replicating Directory Partitions

To manually replicate all AD partitions from domain controller DC1 to DC2:

# samba-tool drs replicate DC2 DC1 dc=samdom,dc=example,dc=com
Replicate from DC1 to DC2 was successful.

# samba-tool drs replicate DC2 DC1 DC=ForestDnsZones,DC=samdom,DC=example,DC=com
Replicate from DC1 to DC2 was successful.

# samba-tool drs replicate DC2 DC1 CN=Configuration,DC=samdom,DC=example,DC=com
Replicate from DC1 to DC2 was successful.

# samba-tool drs replicate DC2 DC1 DC=DomainDnsZones,DC=samdom,DC=example,DC=com
Replicate from DC1 to DC2 was successful.

# samba-tool drs replicate DC2 DC1 CN=Schema,CN=Configuration,DC=samdom,DC=example,DC=com
Replicate from DC1 to DC2 was successful.

By default, the samba-tool drs replicate command replicates only object operations that were not ran on the destination DC. This includes:

  • Create new objects
  • Updated changed objects
  • Delete removed objects

To resynchronise all objects in a partition, pass the --full-sync option to the command.