help DCDiag.exe /a UserAccountControl Out-of-date

Discussion in 'Active Directory' started by Fredrick A. Zilz, Jan 31, 2006.

  1. I am seeing some intermittent user authentication issues, and wanted to
    verify my domain controllers. I run a Windows 2003 server network. When I
    run DCDiag from one of my 3 domain controllers, everything passes with the
    following exceptions:

    DCdiag.exe /a

    object replicated
    authoritative attribute userAccountControl on IH-Sql001
    usnLocalChange = 3233954
    Last Originating DSA = IH-SQL001
    timeOriginating Change = 3233954
    timeLastOriginatingChange = 206-01-31 12:23:02
    VersionLastOriginatingChange = 7

    Out-of-date attribute userAccountControl on IH-Ad01
    usnLocalChange = 1007246
    Last Originating DSA = IH-SQL001
    timeOriginating Change = 3229015
    timeLastOriginatingChange = 206-01-30 11:36:01
    VersionLastOriginatingChange = 6

    Out-of-date attribute userAccountControl on IH-SQL002
    usnLocalChange = 1440089
    Last Originating DSA = IH-SQL001
    timeOriginating Change = 3229015
    timeLastOriginatingChange = 206-01-30 11:36:01
    VersionLastOriginatingChange = 6

    Also:
    Warning: IH-SQL002 is not advertising as a time server.

    How would I go about fixing this issue, and what effects would I expect to
    see with this attribute being out of date between my domain controllers.
    How would an attribute get out of date between controllers?

    Thanks in advance for your assistance.
     
    Fredrick A. Zilz, Jan 31, 2006
    #1
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.