Windows Server 2016-domain Site replication query

Source: Internet
Author: User
Tags dsquery

After understanding the concept of Site replication, the following chapters we will be around the site replication related content on the daily replication of domain control, maintenance, and so on simple introduction. This chapter for everyone to bring about the domain control Site replication query related content, I hope you can like. The replication topology between domain controllers in the site is automatically generated by the KCC, and the intersite domain controller replication topology is automatically generated by ISTG. If the number of domain controllers is small and within one site, it is recommended that the replication topology be automatically managed by the KCC. If multi-site management, it is recommended that the site use a high-performance bridgehead server and other site links, or automatically generated by ISTG, the replication environment to minimize the domain administrator to participate in the manual, and ensure that the network links unblocked. Replication recommendations are managed through Active directory Sites and Services.

1. Query the site information in the domain: dsquery site

Information about the dsquery command-line help is as follows:
C:\> dsquery/?
Description: The tool's command set allows you to query the directory according to the specified criteria.
In addition to dsquery * (dsquery * can query any type of object), each of the following dsquery commands can find a specific object type:
dsquery computer-Find the computer in the directory.
dsquery contact-find contacts in the directory.
dsquery subnet-finds subnets in the directory.
dsquery group-finds groups in the directory.
dsquery ou-finds the organizational unit in the directory.
dsquery site-finds sites in the directory.
dsquery server-Find the AD Dc/lds instance in the directory.
dsquery user-finds users in the directory.
dsquery quota-find quota provisions in the directory.
dsquery partition-finds a partition in the directory.
dsquery *-use a generic LDAP query to find any object in the directory.
To find help for a specific command, type "dsquery <ObjectType>/?", where <ObjectType> is one of the supported object types shown above.
dsquery site
Finds a site in the directory that matches the specified search criteria. If the predefined search conditions in the command are not sufficient, you can use the more general form of the query command dsquery *.
Grammar:
dsquery site [-o {DN | rdn}] [-name name] [-desc Description] [{-S server|-D Domain}] [-u UserName] [-p {password|*}] [-Q ] [-R] [-GC] [-limit numberofobjects] [{-uc |-uco |-uci}]
Parameters
-O {DN | rdn} Specifies the display format for the list of entries found by the search. The value DN Displays the distinguished name of each entry. The value RDN displays the relative distinguished name of each entry.
-name name searches for a site whose name attribute (the value of the CN attribute) matches name. For example, "na*" or "europe*".
-desc Description searches for computers whose description properties match the Description. For example, "corp*" or "*nch".
{-S server|-d domain} connects to the specified remote server or domain. By default, the computer is connected to a domain controller in the logon domain.
-U UserName Specifies the user name that the user uses to log on to the remote server. By default,-U uses the user name when the user logs on. You can specify a user name using any of the following formats:
User name (for example, Linda)
Domain \ User name (for example, Widgets\linda)
User principal Name (UPN) (e.g. [email protected])
-P {Password | *} Specifies whether to log on to the remote server using a password or *. If you type *, you will be prompted to enter your password.
-Q cancels all output to the standard output (quiet mode).
-r Specifies that the search will use recursion or tracking references during the search. By default, searches will not track references during a search.
-GC Specifies that the search uses the Active Directory global catalog.
-limit numberofobjects Specifies the number of objects that will be returned that match the given criteria. If the value of Numberofobjects is 0, all matching objects are returned. If this parameter is not specified, the first 100 results are displayed by default.
{-UC |-uco |-uci} Specifies to output or enter data in Unicode format. The following table lists and describes each of these formats.
-UC Specifies the Unicode format for input from pipe (|) or Output to pipe (|).
-UCO specifies that output to a pipe (|) or file in Unicode format.
-UCI specifies the input from a pipe (|) or file in Unicode format.

2. querying all domain controllers in the site: dsquery server–site < site name >

3. querying domain Controllers intersite topology Generator (ISTG) server information: Repadmin/istg

repadmin ISTG
Returns the computer name of the inter-Site Topology Generator (ISTG) server for the specified site.
Grammar
REPADMIN/ISTG [DSA] [/verbose]
Parameters
DSA specifies a directory server. For more information about the DSA parameters, see General parameters.
/VERBOSE Lists the detailed information.

4. force synchronous replication of two domain controller information: repadmin/replicate domain A domain B dc=*,dc=com/force

PS c:\> repadmin/?
Usage: repadmin <cmd> <args> [/u:{domain\user}] [/pw:{password|*}] [/retry[:<retries>][:<delay> ]] [/csv]
Use the following commands to view the Help:
/? Displays a series of commands and their descriptions that you can use in repadmin.
/help and/? Same.
/?:<cmd> Displays the available parameters <args>, appropriate syntax, and a list of examples for a specific command <cmd>. /help:<cmd> is the same as/?:<cmd>
/EXPERTHELP displays a series of commands for use by advanced users only.
/LISTHELP displays syntax variables that can be used for Dsa_name, Dsa_list, NCNAME, and obj_list strings.
/OLDHELP displays a list of deprecated commands that are still valid, but Microsoft no longer supports them.
Supported <cmd> commands (use/?<cmd> for detailed help):
/KCC forces the KCC on the target domain controller to recalculate its inbound replication topology immediately.
/PRP This command allows an administrator to view or modify the password replication policy for an RODC.
/queue shows the inbound replication request that the DC needs to publish in order to be consistent with its source replication partner.
The/replicate trigger copies the specified directory partition immediately from the source DC to the destination domain controller.
/replsingleobj copies a single object between any two domain controllers that have a common directory partition.
The/replsummary replsummary operation provides a quick and concise overview of the forest's replication status and relative health status.
/RODCPWDREPL triggers the copy of the specified user's password from the source (hub DC) to one or more read-only DCs.
/SHOWATTR displays the properties of the object.
/SHOWOBJMETA displays replication metadata for the specified object stored in Active Directory, such as the property ID, version number, original and local update sequence number (USN), the GUID of the original server, and the date and time stamp.
/SHOWREPL The replication status is displayed when the specified domain controller last attempted inbound replication of an Active Directory partition.
/SHOWUTDVEC displays the highest update sequence number (USN) submitted, where the destination DC copy of Active Directory
Displays the submission for itself and its transitive partners.
/syncall synchronizes the specified domain controller with all replication partners.
Additional parameters Supported:
/u: Specifies the domain and user name {domain\user}, separated by backslashes, that have permission to perform operations in Active Directory. UPN logon is not supported.
/PW: Specifies the password for the user name entered with the/u parameter.
/retry This parameter can cause the Repadmin to repeat its binding action when the first attempt to bind to the destination DC fails and returns the following error state information: 1722/0x6ba: "The RPC server is unavailable" 1753/0X6D9: "No more available in the endpoint Mapper End Point "
/csv and/showrepl use output commas to separate the results of numeric formatting.

5. Querying for replication information between domain controllers: Repadmin/showrepl

6. Synchronizing domain controller information: Repadmin/syncall

Force synchronization of domain controller information: Repadmin/syncall/force

Sync want domain controller information: repadmin/syncall/j

repadmin syncall
Synchronizes the specified directory server with all replication partners. This command contains several subcommands
Grammar
Repadmin/syncall DSA [NamingContext] [Flags]
Parameters
DSA specifies a directory server.
NamingContext the distinguished name of the specified directory partition.
Flag to perform specific actions during the copy process, as shown below.
Logo description
/A If none of the servers are available, abort.
/A synchronizes all directory partitions in the directory server represented by DSA.
/d determines the server by the distinguished name in the message instead of the GUID DNS.
/e synchronizes directory partitions across all sites. (The default behavior is to synchronize only directory partitions in the same site as the directory server that the DSA represents.) )
/h Displays Help for Repadmin/syncall.
/I repeats indefinitely.
/I executes REPADMIN/SHOWREPL on each directory server pair in the path, and does not perform a synchronization operation.
/j synchronizes only the neighboring directory servers.
/p pauses after each message to give the user an opportunity to abort the operation.
/P Out (push) changes from the directory server represented by DSA. (The default behavior of the command is to pull the change instead of the push.) )
/q runs in quiet mode and cancels the callback (callback) message.
/q runs in very quiet mode; only fatal errors are reported.
/s performs a topology analysis and generates messages, but does not synchronize directory partitions.

? 7. show the number and status of replication between domain controllers: Repadmin/replsum

This chapter is here to share, thanks for your support.

Windows Server 2016-domain Site replication query

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.