question

Marcus-9726 avatar image
0 Votes"
Marcus-9726 asked DSPatrick answered

RODCs W2k12 Stuck at DFSR Migration State 'Start', Global State 'Eliminated'

Hi,

I have 8 domain controllers with mixture of 2016 & 2012 r2 OS versions. Last week I have done the dfsr migration but when I check the status using dfsrmig /getglobalstate, the results showing the 3 RODCs stuck at 'Start' state:

The domain controllers are not in sync with Global State ('Eliminated'):

Domain Controller (Local Migration State) - DC Type



RODC01 ('Start') - Read-only DC
RODC02 ('Start') - Read-only DC
RODC03 ('Start') - Read-only DC

Migration has not yet reached a consistent state on all Domain Controllers.
State information might be stale due to AD latency.

May I know how can I fix this since the global state has became 'Eliminated' and is there any replication issue for these RODC? The repadmin /replsum showing replication status just fine. Have checked some articles from internet and took a look at dfsrmig /DeleteRoNtfrsMember and dfsrmig /CreateGlobalObjects. I'm not sure if I can still run this as I know 'Eliminated' state is not able to rollback anything.

Thank you.

windows-serverwindows-active-directorywindows-server-management
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @Marcus-9726,

Thank you for posting here.

Hope the information provided by DSPatrick is helpful.

Should you have any question or concern, please feel free to let us know.


Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·

Hello @Marcus-9726,
I just want to confirm the current situations.
Please feel free to let us know if you need further assistance.


Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·
DSPatrick avatar image
0 Votes"
DSPatrick answered Marcus-9726 commented

You may also need to do dfsrmig /CreateGlobalObjects on the RODC
https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/dfsrmig


--please don't forget to Accept as answer if the reply is helpful--






· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Patrick,

Does it means that I have to run the following commands in sequence ?

  1. dfsrmig /DeleteRoNtfrsMember (for each RODC)

  2. dfsrmig /CreateGlobalObjects (run once only after running step 1 on all RODC?)

Is there any impact for running above commands since the global state now is already Eliminated? Appreciate your advise on this.

Thanks.



0 Votes 0 ·
DSPatrick avatar image
0 Votes"
DSPatrick answered Marcus-9726 edited

From the document I linked

/createglobalobjects
Creates the global objects and settings in AD DS used by DFS Replication uses. The only situations where you should use this option to manually create objects and settings, are:
- A new read-only domain controller is promoted during migration. If a new read-only domain controller is promoted in the domain after moving into the Prepared state, but before migration to the Eliminated state, then the objects that correspond to the new domain controller aren't created, causing replication and the migration to fail.
- Global settings for the DFS Replication service are missing or were deleted. If these settings are missing for a domain controller, migration from the Start state to the Prepared state will stall at the Preparing transition state. Note: Because the global AD DS settings for the DFS Replication service for a read-only domain controller are created on the PDC emulator, these settings need to replicate to the read-only domain controller from the PDC emulator before the DFS Replication service on the read-only domain controller can use these settings. Because of Active Directory replication latencies, this replication can take some time to occur.

--please don't forget to Accept as answer if the reply is helpful--





· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Can you please help to confirm the following?

Does it means that I have to run the following commands in sequence ?

  1. dfsrmig /DeleteRoNtfrsMember (run on PDC for each RODC)

  2. dfsrmig /CreateGlobalObjects (run once only on PDC after running step 1 on all RODC?)

0 Votes 0 ·
DSPatrick avatar image
0 Votes"
DSPatrick answered DSPatrick commented

I don't see a problem with this.
/DeleteRoNtfrsMember

Use this option to manually delete the AD DS settings only when the automatic deletion fails on a read-only domain controller and stalls the read-only domain controller for a long time during the migration from the Redirected state to the Eliminated state.

--please don't forget to Accept as answer if the reply is helpful--




· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Alright, I will execute these 2 commands and let you know the result. Thanks for helping at this moment.

0 Votes 0 ·

Sounds good, you're welcome.




0 Votes 0 ·
DSPatrick avatar image
0 Votes"
DSPatrick answered

Just checking if there's any progress or updates?

--please don't forget to Accept as answer if the reply is helpful--




5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.