NTDS KCC errors

Discussion in 'Windows Server' started by Brett Lindsey, Jul 27, 2005.

  1. My Windows 2003 PDC is dishing out the following events in the Directory
    Service log. (listed in order of occurrence). Over the past week or so, this
    hase been happening what seems to be once a day @ 9:55am > 7:55am > 9:55am &
    more recently 9:55PM.

    Any ideas?

    ---------------------------------------------

    Type: Warning
    Source: NTDS KCC
    Event ID: 1308
    Event Time: 7/25/2005 9:55:55 PM
    User: NT AUTHORITY\ANONYMOUS LOGON
    Computer: LSDC
    Description:
    The Knowledge Consistency Checker (KCC) has detected that successive
    attempts to replicate with the following domain controller has consistently
    failed.
    Attempts:
    2
    Domain controller:
    CN=NTDS
    Settings,CN=HNLDOCS,CN=Servers,CN=Honolulu,CN=Sites,CN=Configuration,DC=mydomain,DC=com
    Period of time (minutes):
    122
    The Connection object for this domain controller will be ignored, and a new
    temporary connection will be established to ensure that replication
    continues. Once replication with this domain controller resumes, the
    temporary connection will be removed.
    Additional Data
    Error value:
    0 The operation completed successfully.

    ---------------------------------------------

    Type: Warning
    Source: NTDS KCC
    Event ID: 1566
    Event Time: 7/25/2005 9:55:55 PM
    User: NT AUTHORITY\ANONYMOUS LOGON
    Computer: LSDC
    Description:
    All domain controllers in the following site that can replicate the
    directory partition over this transport are currently unavailable.
    Site:
    CN=Honolulu,CN=Sites,CN=Configuration,DC=mydomain,DC=com
    Directory partition:
    DC=mydomain,DC=com
    Transport:
    CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=mydomain,DC=com

    ---------------------------------------------

    Type: Error
    Source: NTDS KCC
    Event ID: 1311
    Event Time: 7/25/2005 9:55:55 PM
    User: NT AUTHORITY\ANONYMOUS LOGON
    Computer: LSDC
    Description:
    The Knowledge Consistency Checker (KCC) has detected problems with the
    following directory partition.
    Directory partition:
    DC=mydomain,DC=com
    There is insufficient site connectivity information in Active Directory
    Sites and Services for the KCC to create a spanning tree replication
    topology. Or, one or more domain controllers with this directory partition
    are unable to replicate the directory partition information. This is probably
    due to inaccessible domain controllers.
    User Action
    Use Active Directory Sites and Services to perform one of the following
    actions:
    - Publish sufficient site connectivity information so that the KCC can
    determine a route by which this directory partition can reach this site. This
    is the preferred option.
    - Add a Connection object to a domain controller that contains the directory
    partition in this site from a domain controller that contains the same
    directory partition in another site.
    If neither of the Active Directory Sites and Services tasks correct this
    condition, see previous events logged by the KCC that identify the
    inaccessible domain controllers.

    ---------------------------------------------

    Type: Warning
    Source: NTDS KCC
    Event ID: 1865
    Event Time: 7/25/2005 9:55:55 PM
    User: NT AUTHORITY\ANONYMOUS LOGON
    Computer: LSDC
    Description:
    The Knowledge Consistency Checker (KCC) was unable to form a complete
    spanning tree network topology. As a result, the following list of sites
    cannot be reached from the local site.
    Sites:
    CN=Honolulu,CN=Sites,CN=Configuration,DC=mydomain,DC=com

    ---------------------------------------------

    Type: Warning
    Source: NTDS KCC
    Event ID: 1566
    Event Time: 7/25/2005 9:55:55 PM
    User: NT AUTHORITY\ANONYMOUS LOGON
    Computer: LSDC
    Description:
    All domain controllers in the following site that can replicate the
    directory partition over this transport are currently unavailable.
    Site:
    CN=Honolulu,CN=Sites,CN=Configuration,DC=mydomain,DC=com
    Directory partition:
    DC=DomainDnsZones,DC=mydomain,DC=com
    Transport:
    CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=mydomain,DC=com

    ---------------------------------------------

    Type: Error
    Source: NTDS KCC
    Event ID: 1311
    Event Time: 7/25/2005 9:55:55 PM
    User: NT AUTHORITY\ANONYMOUS LOGON
    Computer: LSDC
    Description:
    The Knowledge Consistency Checker (KCC) has detected problems with the
    following directory partition.
    Directory partition:
    DC=DomainDnsZones,DC=mydomain,DC=com
    There is insufficient site connectivity information in Active Directory
    Sites and Services for the KCC to create a spanning tree replication
    topology. Or, one or more domain controllers with this directory partition
    are unable to replicate the directory partition information. This is probably
    due to inaccessible domain controllers.
    User Action
    Use Active Directory Sites and Services to perform one of the following
    actions:
    - Publish sufficient site connectivity information so that the KCC can
    determine a route by which this directory partition can reach this site. This
    is the preferred option.
    - Add a Connection object to a domain controller that contains the directory
    partition in this site from a domain controller that contains the same
    directory partition in another site.
    If neither of the Active Directory Sites and Services tasks correct this
    condition, see previous events logged by the KCC that identify the
    inaccessible domain controllers.

    ---------------------------------------------

    Type: Warning
    Source: NTDS KCC
    Event ID: 1865
    Event Time: 7/25/2005 9:55:55 PM
    User: NT AUTHORITY\ANONYMOUS LOGON
    Computer: LSDC
    Description:
    The Knowledge Consistency Checker (KCC) was unable to form a complete
    spanning tree network topology. As a result, the following list of sites
    cannot be reached from the local site.
    Sites:
    CN=Honolulu,CN=Sites,CN=Configuration,DC=mydomain,DC=com

    ---------------------------------------------

    Type: Warning
    Source: NTDS KCC
    Event ID: 1566
    Event Time: 7/25/2005 9:55:55 PM
    User: NT AUTHORITY\ANONYMOUS LOGON
    Computer: LSDC
    Description:
    All domain controllers in the following site that can replicate the
    directory partition over this transport are currently unavailable.
    Site:
    CN=Honolulu,CN=Sites,CN=Configuration,DC=mydomain,DC=com
    Directory partition:
    DC=ForestDnsZones,DC=mydomain,DC=com
    Transport:
    CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=mydomain,DC=com

    ---------------------------------------------

    Type: Error
    Source: NTDS KCC
    Event ID: 1311
    Event Time: 7/25/2005 9:55:55 PM
    User: NT AUTHORITY\ANONYMOUS LOGON
    Computer: LSDC
    Description:
    The Knowledge Consistency Checker (KCC) has detected problems with the
    following directory partition.
    Directory partition:
    DC=ForestDnsZones,DC=mydomain,DC=com
    There is insufficient site connectivity information in Active Directory
    Sites and Services for the KCC to create a spanning tree replication
    topology. Or, one or more domain controllers with this directory partition
    are unable to replicate the directory partition information. This is probably
    due to inaccessible domain controllers.
    User Action
    Use Active Directory Sites and Services to perform one of the following
    actions:
    - Publish sufficient site connectivity information so that the KCC can
    determine a route by which this directory partition can reach this site. This
    is the preferred option.
    - Add a Connection object to a domain controller that contains the directory
    partition in this site from a domain controller that contains the same
    directory partition in another site.
    If neither of the Active Directory Sites and Services tasks correct this
    condition, see previous events logged by the KCC that identify the
    inaccessible domain controllers.

    ---------------------------------------------

    Type: Warning
    Source: NTDS KCC
    Event ID: 1865
    Event Time: 7/25/2005 9:55:55 PM
    User: NT AUTHORITY\ANONYMOUS LOGON
    Computer: LSDC
    Description:
    The Knowledge Consistency Checker (KCC) was unable to form a complete
    spanning tree network topology. As a result, the following list of sites
    cannot be reached from the local site.
    Sites:
    CN=Honolulu,CN=Sites,CN=Configuration,DC=mydomain,DC=com

    ---------------------------------------------

    Type: Warning
    Source: NTDS KCC
    Event ID: 1566
    Event Time: 7/25/2005 9:55:55 PM
    User: NT AUTHORITY\ANONYMOUS LOGON
    Computer: LSDC
    Description:
    All domain controllers in the following site that can replicate the
    directory partition over this transport are currently unavailable.
    Site:
    CN=Honolulu,CN=Sites,CN=Configuration,DC=mydomain,DC=com
    Directory partition:
    CN=Configuration,DC=mydomain,DC=com
    Transport:
    CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=mydomain,DC=com

    ---------------------------------------------

    Type: Error
    Source: NTDS KCC
    Event ID: 1311
    Event Time: 7/25/2005 9:55:55 PM
    User: NT AUTHORITY\ANONYMOUS LOGON
    Computer: LSDC
    Description:
    The Knowledge Consistency Checker (KCC) has detected problems with the
    following directory partition.
    Directory partition:
    CN=Configuration,DC=mydomain,DC=com
    There is insufficient site connectivity information in Active Directory
    Sites and Services for the KCC to create a spanning tree replication
    topology. Or, one or more domain controllers with this directory partition
    are unable to replicate the directory partition information. This is probably
    due to inaccessible domain controllers.
    User Action
    Use Active Directory Sites and Services to perform one of the following
    actions:
    - Publish sufficient site connectivity information so that the KCC can
    determine a route by which this directory partition can reach this site. This
    is the preferred option.
    - Add a Connection object to a domain controller that contains the directory
    partition in this site from a domain controller that contains the same
    directory partition in another site.
    If neither of the Active Directory Sites and Services tasks correct this
    condition, see previous events logged by the KCC that identify the
    inaccessible domain controllers.

    ---------------------------------------------
    Type: Warning
    Source: NTDS KCC
    Event ID: 1865
    Event Time: 7/25/2005 9:55:55 PM
    User: NT AUTHORITY\ANONYMOUS LOGON
    Computer: LSDC
    Description:
    The Knowledge Consistency Checker (KCC) was unable to form a complete
    spanning tree network topology. As a result, the following list of sites
    cannot be reached from the local site.
    Sites:
    CN=Honolulu,CN=Sites,CN=Configuration,DC=mydomain,DC=com
     
    Brett Lindsey, Jul 27, 2005
    #1
    1. Advertisements

  2. Hi Brett, read below any question....

    [cut]

    This is probably a temporary situation. No user action is required.
    However, if the domain controller was removed from the site topology and it
    will not be replaced, use ntdsutil.exe to remove references to it from the
    forest. This program is located in the Winnt\System32 folder.
    http://snipurl.com/gjnf

    Regards,

    --
    ---
    Giuseppe Nacci
    Microsoft Certified System Engineer
    Security Manager

    --------------------------------------------------------------------
    CONFIDENTIALITY NOTICE
    This message and its attachments are addressed solely to the persons
    above and may contain confidential information. If you have received
    the message in error, be informed that any use of the content hereof
    is prohibited. Please return it immediately to the sender and delete
    the message. Should you have any questions, please contact us by
    replying to
    Thank you
    --------------------------------------------------------------------
     
    Giuseppe Nacci, Jul 27, 2005
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.