Windows – Active Directory Replication – One way street

active-directorywindows

I have two Windows Server 2012 Virtual Machines with Active Directory Domain Services installed. They are both Domain Controllers on the same domain, and both are running DNS servers.

When both machines are running, I create a new user on AD1(the first machine I setup). This new user does not replicate to AD2(the second machine).

When I create a new user on AD2, it replicates to AD1 without issue.

There are a number of errors in the event logs for AD1, but despite extensive Googling, I can't quite figure out how to solve the issue. I've been trying for a few days and I'm at my wits' end. Sometimes the error is from the DFRS, sometimes it's from the Domain Services itself.

I'd be happy to post any and all error messages if anyone is interested – any help would be unbelievably appreciated; I just can't seem to lick this 🙁

(Quick edit: The latest errors state: There are no more endpoints available from the endpoint mapper.)

Best Answer

It sounds like there is a firewall between the two. In 2008 R2 you need to be able to communicate on ports:

  1. 135 - to map endpoints
  2. 445 - Sysvol
  3. 5722 - FRS (if you're using it)
  4. 49152-65535 - RPC

There are more ports needed for actual logins, etc, but these are the minimum needed for replication.

Related Topic