事件 ID 1388 或 1988 年:偵測到的延遲物件Event ID 1388 or 1988: A lingering object is detected

適用於:Windows Server 2016、Windows Server 2012 R2、Windows Server 2012Applies To: Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

如果目的地網域控制站登事件 ID 1388 或事件 ID 1988,偵測到的延遲物件,有兩個條件的話目的地網域控制站:事件 ID 1388:目的地網域控制站發生延遲物件的輸入的複寫。事件 ID 1988:目的地網域控制站已封鎖輸入的複寫 directory 延遲物件的磁碟分割。本主題中事件 ID 1388事件 ID 1988診斷解析度使用 Repadmin 找出授權網域控制站的 GUID使用 Repadmin 移除延遲物件讓嚴格複寫一致性來使用 Repadmin 讓嚴格複寫一致性嚴格複寫一致性,以便使用 Regedit確保的功能升級新的網域控制站的一致性嚴格複寫If a destination domain controller logs Event ID 1388 or Event ID 1988, a lingering object has been detected and one of two conditions exists on the destination domain controller: Event ID 1388: Inbound replication of the lingering object has occurred on the destination domain controller. Event ID 1988: Inbound replication of the directory partition of the lingering object has been blocked on the destination domain controller. In this topic Event ID 1388 Event ID 1988 Diagnosis Resolution Use Repadmin to identify the GUID of an authoritative domain controller Use Repadmin to remove lingering objects Enable strict replication consistency Use Repadmin to enable strict replication consistency Use Regedit to enable strict replication consistency Ensure that strict replication consistency is enabled for newly promoted domain controllers
事件 ID 1388 此事件表示不需要嚴格複寫一致性支援目的地網域控制站收到更新不在本機資料庫的複本 Active Directory 物件的要求。回應,目的地網域控制站要求來源複寫合作夥伴完整物件。如此一來,目的地網域控制站複寫延遲物件。因此,已插入 directory 重新引入延遲物件。 時的事件編號 1388 年發生,請來源網域控制站(複寫合作夥伴輸出-複寫延遲物件)或目的地網域控制站(報告事件 ID 1388 輸入的複寫合作夥伴)執行的 Windows 2000 Server,如果您無法使用 Repadmin 工具來移除延遲物件。了解如何移除延遲物件這種情形下的資訊,會看到 314282 中 Microsoft 知識庫 (http://go.microsoft.com/fwlink/?LinkId=41410http://go.microsoft.com/fwlink/?LinkId=41410)。程序和本文中的資訊適用於移除延遲物件的通用伺服器,以及來自網域控制站未通用伺服器。 事件文字辨識來源網域控制站和過時(延遲)物件。事件文字的範例如下: Event ID 1388 This event indicates that a destination domain controller that does not have strict replication consistency enabled received a request to update an object that does not reside in the local copy of the Active Directory database. In response, the destination domain controller requested the full object from the source replication partner. In this way, a lingering object was replicated to the destination domain controller. Therefore, the lingering object was reintroduced into the directory. When Event ID 1388 occurs, if either the source domain controller (the replication partner that is outbound-replicating the lingering object) or the destination domain controller (the inbound replication partner that reports Event ID 1388) is running Windows 2000 Server, you cannot use the Repadmin tool to remove lingering objects. For information about how to remove lingering objects in this case, see article 314282 in the Microsoft Knowledge Base (http://go.microsoft.com/fwlink/?LinkId=41410http://go.microsoft.com/fwlink/?LinkId=41410). The procedures and information in this article apply to the removal of lingering objects from global catalog servers as well as from domain controllers that are not global catalog servers. The event text identifies the source domain controller and the outdated (lingering) object. The following is an example of the event text: Log Name: Directory Service Source: Microsoft-Windows-ActiveDirectory_DomainService Date: 5/3/2008 3:34:01 PM Event ID: 1388 Task Category: Replication Level: Error Keywords: Classic User: ANONYMOUS LOGON Computer: DC3.contoso.com Description: Another domain controller (DC) has attempted to replicate into this DC an object which is not present in the local Active Directory Domain Services database. The object may have been deleted and already garbage collected (a tombstone lifetime or more has past since the object was deleted) on this DC. The attribute set included in the update request is not sufficient to create the object. The object will be re-requested with a full attribute set and re-created on this DC. Source DC (Transport-specific network address): 4a8717eb-8e58-456c-995a-c92e4add7e8e._msdcs.contoso.com Object: CN=InternalApps,CN=Users,DC=contoso,DC=com Object GUID: a21aa6d9-7e8a-4a8f-bebf-c3e38d0b733a Directory partition: DC=contoso,DC=com Destination highest property USN: 20510 User Action: Verify the continued desire for the existence of this object. To discontinue re-creation of future similar objects, the following registry key should be created. Registry Key: HKLM\System\CurrentControlSet\Services\NTDS\Parameters\Strict Replication Consistency
事件 ID 1988 這個事件指示目的地網域控制站的支援嚴格複寫一致性,已收到更新並不在本機的 Active Directory 資料庫複本物件要求。回應,目的地網域控制站封鎖複寫包含該來源網域控制站該物件 directory 磁碟分割。事件文字辨識來源網域控制站和過時(延遲)物件。事件文字的範例如下: Event ID 1988 This event indicates that a destination domain controller that has strict replication consistency enabled has received a request to update an object that does not exist in its local copy of the Active Directory database. In response, the destination domain controller blocked replication of the directory partition containing that object from that source domain controller. The event text identifies the source domain controller and the outdated (lingering) object. The following is an example of the event text: Log Name: Directory Service Source: Microsoft-Windows-ActiveDirectory_DomainService Date: 2/7/2008 8:20:11 AM Event ID: 1988 Task Category: Replication Level: Error Keywords: Classic User: ANONYMOUS LOGON Computer: DC5.contoso.com Description: Active Directory Domain Services Replication encountered the existence of objects in the following partition that have been deleted from the local domain controllers (DCs) Active Directory Domain Services database. Not all direct or transitive replication partners replicated in the deletion before the tombstone lifetime number of days passed. Objects that have been deleted and garbage collected from an Active Directory Domain Services partition but still exist in the writable partitions of other DCs in the same domain, or read-only partitions of global catalog servers in other domains in the forest are known as "lingering objects". This event is being logged because the source DC contains a lingering object which does not exist on the local DCs Active Directory Domain Services database.
This replication attempt has been blocked. The best solution to this problem is to identify and remove all lingering objects in the forest. Source DC (Transport-specific network address): 4a8717eb-8e58-456c-995a-c92e4add7e8e._msdcs.contoso.com Object: CN=InternalApps,CN=Users,DC=contoso,DC=com Object GUID: a21aa6d9-7e8a-4a8f-bebf-c3e38d0b733a
診斷 已永久被從 AD DS 物件(亦即它標記已經回收所有連接的網域控制站)中斷連接的網域控制站維持。網域控制站因為它中斷接收的物件刪除直接或轉移︰ 複寫失敗 (離線或遇到輸入︰ 複寫失敗) 從超過標記期間期間複寫拓撲。網域控制站現在重新連接到拓撲和已更新該物件網域控制站,導致的更新可供複寫複寫合作夥伴複寫通知。複製合作夥伴回應根據其複寫一致性設定。嘗試複製物件寫入的適用於此通知。一份寫入延遲物件也可能會存在通用的伺服器上。 Diagnosis An object that has been permanently deleted from AD DS (that is, its tombstone has been garbage-collected on all connected domain controllers) remains on a disconnected domain controller. The domain controller failed to receive direct or transitive replication of the object deletion because it was disconnected (it is offline or experiencing an inbound replication failure) from the replication topology for a period that exceeded a tombstone lifetime. The domain controller is now reconnected to the topology and that object has been updated on the domain controller, causing a replication notification to the replication partner that an update is ready for replication. The replication partner responded according to its replication consistency setting. This notification applies to attempted replication of a writable object. A copy of the writable lingering object might also exist on a global catalog server.
解析度 偵測到的延遲物件複寫時,您可以移除物件 AD DS,以及物件的任何唯讀的複本,可能會儲存物件(包括通用伺服器)的網域控制站找出並執行repadmin移除延遲物件這些伺服器命令 (repadmin /removelingeringobjects)。 Resolution If replication of a lingering object is detected, you can remove the object from AD DS, along with any read-only replicas of the object, by identifying the domain controllers that might store this object (including global catalog servers) and running a repadmin command to remove lingering objects on these servers (repadmin /removelingeringobjects). 正在執行的網域控制站在這個命令已nextref_longhorincludes >。This command is available on domain controllers that are running nextref_longhorincludes>. 它也可在網域控制站的不執行nextref_longhorincludes > 執行 Repadmin.exe 隨附於 Windows 在 Windows Server 2003 的支援工具的版本,但。 移除延遲物件,執行下列動作: 使用事件文字來找出下列: directory 物件的磁碟分割 嘗試複寫延遲物件的來源網域控制站 使用 Repadmin 找出授權網域控制站的 GUID 使用 Repadmin 移除延遲物件 讓嚴格複寫一致性,如有需要 嚴格複寫一致性上新的網域控制站時升級 Windows 2000 Server 樹如有需要, It is also available on domain controllers that are not running nextref_longhorincludes> but are running the version of Repadmin.exe that is included with Windows Support Tools in Windows Server 2003. To remove lingering objects, do the following: Use the event text to identify the following: The directory partition of the object The source domain controller that attempted replication of the lingering object Use Repadmin to identify the GUID of an authoritative domain controller Use Repadmin to remove lingering objects Enable strict replication consistency, if necessary Ensure strict replication consistency on new domain controllers when upgrading a Windows Server 2000 Forest, if necessary
用來找出授權網域控制站的 GUID 執行移除延遲物件的程序,您必須有寫入 directory 磁碟分割包含所回報之延遲物件複本最新的網域控制站辨識全球唯一 (GUID)。事件訊息可 directory 磁碟分割。 儲存物件 GUID 網域控制站在objectguid 資訊NTDS 設定物件的屬性。 需求 的成員資格網域系統管理員網域中的網域控制站找出您想要使用的 GUID 最小,才能完成此程序。 Use Repadmin to identify the GUID of an authoritative domain controller To perform the procedure that removes lingering objects, you must identify the globally unique identifier (GUID) of an up-to-date domain controller that has a writable replica of the directory partition that contains the lingering object that has been reported. The directory partition is identified in the event message. The object GUID of a domain controller is stored in the objectGUID attribute of the NTDS Settings object. Requirements Membership in Domain Admins in the domain of the domain controller whose GUID you want to identify is the minimum required to complete this procedure. review_detailincludes > 工具:Repadmin.exe 以找出的網域控制站 GUID 命令提示字元中,輸入下列命令,並按一下 ENTER: repadmin /showrepl<伺服器名稱> review_detailincludes> Tool: Repadmin.exe To identify the GUID of a domain controller At a command prompt, type the following command, and then press ENTER: repadmin /showrepl <ServerName>
參數Parameter 描述Description
/showrepl/showrepl 顯示複寫狀態,包括時所指定的網域控制站<伺服器名稱>上一次嘗試輸入的複寫 Active Directory 磁碟分割。Displays the replication status, including when the domain controller that is specified by <ServerName> last attempted inbound replication of Active Directory partitions. 也會顯示指定的網域控制站的 GUID。Also displays the GUID of the specified domain controller.
<伺服器名稱><ServerName> 網域控制站的 GUID 您想要顯示的名稱。The name of the domain controller whose GUID you want to display.
輸出的第一節,找出objectguid 資訊的項目。In the first section of the output, locate the objectGuid entry. 選取並使您可以使用其他地方的 GUID 值複製文字檔案。Select and copy the GUID value into a text file so that you can use it elsewhere.
用來移除延遲物件 如果您的目的地網域控制站和來源網域控制站正在執行的是 Windows Server 2003 或nextref_longhorincludes >,您可以使用此程序移除延遲物件 Repadmin 使用。 Use Repadmin to remove lingering objects If the destination domain controller and source domain controller are running either Windows Server 2003 or nextref_longhorincludes>, you can use this procedure to remove lingering objects with Repadmin. 如果任一網域控制站執行的 Windows 2000 Server、依照 314282 中 Microsoft 知識庫文件中的指示操作 (http://go.microsoft.com/fwlink/?LinkId=41410http://go.microsoft.com/fwlink/?LinkId=41410)。 需求 的成員資格網域系統管理員網域中的網域控制站的延遲物件,或企業系統管理員」如果 directory 的磁碟分割的延遲物件的設定或架構 directory 磁碟分割、最小,才能完成此程序。If either domain controller is running Windows 2000 Server, follow the instructions in article 314282 in the Microsoft Knowledge Base (http://go.microsoft.com/fwlink/?LinkId=41410http://go.microsoft.com/fwlink/?LinkId=41410). Requirements Membership in Domain Admins in the domain of the domain controller that has lingering objects, or Enterprise Admins if the directory partition that has lingering objects is the configuration or schema directory partition, is the minimum required to complete this procedure. review_detailincludes > 作業系統:Windows Server 2003 或nextref_longhorincludes > 的<伺服器名稱>和<ServerGUID> 工具:Repadmin.exe 到用來移除延遲物件 開放命令提示字元以系統管理員身分:上[開始] ] 功能表中,以滑鼠右鍵按一下命令提示字元,,然後按一下 [以系統管理員身分執行。如果使用者 Account 控制項對話方塊中顯示,提供網域系統管理員或企業管理員認證,如有需要,然後再按一下繼續] 命令提示字元中,輸入下列命令,並按一下 ENTER: repadmin /removelingeringobjects<伺服器名稱><ServerGUID><DirectoryPartition> /advisory_mode review_detailincludes> Operating system: Windows Server 2003 or nextref_longhorincludes> for <ServerName> and <ServerGUID> Tool: Repadmin.exe To use Repadmin to remove lingering objects Open a Command Prompt as an administrator: On the Start menu, right-click Command Prompt, and then click Run as administrator. If the User Account Control dialog box appears, provide Domain Admins or Enterprise Admins credentials, if required, and then click Continue. At the command prompt, type the following command, and then press ENTER: repadmin /removelingeringobjects <ServerName> <ServerGUID> <DirectoryPartition> /advisory_mode
參數Parameter 描述Description
/removelingeringobjects/removelingeringobjects 移除延遲物件網域控制站所指定的<伺服器名稱>來指定 directory 磁碟分割的<DirectoryPartition>。Removes lingering objects from the domain controller that is specified by <ServerName> for the directory partition that is specified by <DirectoryPartition>.
<伺服器名稱><ServerName> 有延遲物件,有如在事件訊息(事件 ID 1388 或事件 ID 1988)的網域控制站的名稱。The name of the domain controller that has lingering objects, as identified in the event message (Event ID 1388 or Event ID 1988). 您可以使用的網域名稱系統」(DNS) 名稱或分辨的名稱,例如分辨 DATA-CN = 組織單位,DC5 = 網域控制站俠 = contoso 俠 = com 或 DNS 名稱 DC5.contoso.com。You can use the Domain Name System (DNS) name or the distinguished name, for example, the distinguished name CN=DC5,OU=Domain Controllers,DC=contoso,DC=com or the DNS name DC5.contoso.com.
<ServerGUID><ServerGUID> GUID 的網域控制站的最新狀態,可寫入 directory 磁碟分割,其中包含延遲物件複本The GUID of a domain controller that has an up-to-date, writable replica of the directory partition that contains the lingering object
<DirectoryPartition><DirectoryPartition> 分辨的名稱 directory 磁碟分割,可在事件訊息,例如: contoso.com 森林中的銷售網域 directory 磁碟分割:俠 = 銷售,俠 = contoso 俠 = com 設定 directory 磁碟分割 contoso.com 森林中的:DATA-CN = 設定,俠 = contoso 俠 = com 架構 directory 磁碟分割 contoso.com 森林中的:DATA-CN = 區結構描述 DATA-CN = 設定,俠 = contoso 俠 = com The distinguished name of the directory partition that is identified in the event message, for example: For the Sales domain directory partition in the contoso.com forest: DC=sales,DC=contoso,DC=com For the configuration directory partition in the contoso.com forest: CN=configuration,DC=contoso,DC=com For the schema directory partition in the contoso.com forest: CN=schema,CN=configuration,DC=contoso,DC=com
/advisory_mode/advisory_mode 登,以便您可以檢查它們,而不會移除都將移除延遲物件。Logs the lingering objects that will be removed so that you can review them, but does not remove them.
重複執行步驟 2 不/advisory_mode若要從 directory 磁碟分割 delete 辨識延遲物件。 中的每個可能會遇到延遲網域控制站物件重複步驟 2 和 3。 <伺服器名稱>參數使用DC_LIST語法repadmin,允許使用森林中的所有網域控制站和gc:森林中的所有通用伺服器。若要查看DC_LIST語法,輸入repadmin /listhelp。有關的語法/regkey/removelingeringobjects參數,輸入repadmin /experthelp Repeat step 2 without /advisory_mode to delete the identified lingering objects from the directory partition. Repeat steps 2 and 3 for every domain controller that might have lingering objects. The <ServerName> parameter uses the DC_LIST syntax for repadmin, which allows the use of for all domain controllers in the forest and gc: for all global catalog servers in the forest. To see the DC_LIST syntax, type repadmin /listhelp. For information about the syntax of the /regkey and /removelingeringobjects parameters, type repadmin /experthelp.
讓嚴格複寫一致性 為了確保無法複製延遲物件,如果發生,讓所有網域控制站嚴格複寫一致性。 Enable strict replication consistency To ensure that lingering objects cannot be replicated if they occur, enable strict replication consistency on all domain controllers. 複寫一致性的設定會儲存在每個網域控制站的登錄。The setting for replication consistency is stored in the registry on each domain controller. 不過在執行 Windows Server 2003 含 Service Pack 1 (SP1)、Windows Server 2003 含 Service Pack 2 (SP2)、Windows Server 2003 R2 網域控制站或nextref_longhorincludes >,您可以使用 Repadmin,以便在所有網域控制站嚴格複寫一致性。 您必須在網域控制站執行不含 SP1 的 Windows Server 2003 或執行的任何版本的 Windows 2000 Server、編輯登錄,以讓設定。However, on domain controllers that are running Windows Server 2003 with Service Pack 1 (SP1), Windows Server 2003 with Service Pack 2 (SP2), Windows Server 2003 R2, or nextref_longhorincludes>, you can use Repadmin to enable strict replication consistency on one or all domain controllers. On domain controllers running Windows Server 2003 without SP1 or running any version of Windows 2000 Server, you must edit the registry to enable the setting.
用來讓嚴格複寫一致性 若要移除延遲物件執行 Windows Server 2003 sp1、Windows Server 2003 sp2、Windows Server 2003 R2 網域控制站在使用此程序或nextref_longhorincludes >。 成員資格在網域系統管理員」,或相當於,才能完成單一網域控制站在這個程序最小值。 Use Repadmin to enable strict replication consistency Use this procedure to remove lingering objects on a domain controller that is running Windows Server 2003 with SP1, Windows Server 2003 with SP2, Windows Server 2003 R2, or nextref_longhorincludes>. Membership in Domain Admins, or equivalent, is the minimum required to complete this procedure on a single domain controller. 資格在企業系統管理員,或相當於,才能完成森林中的所有網域控制站在這個程序最小值。Membership in Enterprise Admins, or equivalent, is the minimum required to complete this procedure on all domain controllers in the forest. review_detailincludes > 到用來讓嚴格複寫一致性 開放命令提示字元以系統管理員身分:在[開始] ] 功能表中,以滑鼠右鍵按一下命令提示字元,,然後按一下 [以系統管理員身分執行。如果使用者 Account 控制項對話方塊中顯示,提供網域系統管理員或企業管理員認證,如有需要,然後再按一下繼續] 命令提示字元中,輸入下列命令,並按一下 ENTER: repadmin /regkey <DC_LIST>嚴格 + review_detailincludes> To use Repadmin to enable strict replication consistency Open a Command Prompt as an administrator: On the Start menu, right-click Command Prompt, and then click Run as administrator. If the User Account Control dialog box appears, provide Domain Admins or Enterprise Admins credentials, if required, and then click Continue. At the command prompt, type the following command, and then press ENTER: repadmin /regkey <DC_LIST> +strict
參數Parameter 描述Description
/regkey/regkey 可讓 (+) 和停用 (-) 的值為嚴格複寫一致性中的項目登錄HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNTDSParametersEnables (+) and disables (-) the value for the Strict Replication Consistency registry entry in HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNTDSParameters
<DC_LIST><DC_LIST> 單一網域控制站的名稱或以套用森林中的所有網域控制站的變更。The name of a single domain controller, or to apply the change to all domain controllers in the forest. 網域控制站的名稱,您可以使用的 DNS 名稱、網域控制站電腦物件,分辨的名稱或分辨的名稱的網域控制站伺服器物件,例如分辨名稱 DATA-CN = 組織單位,DC5 = 網域控制站俠 = contoso 俠 = com 或 DNS 名稱 DC5.contoso.com。For the domain controller name, you can use the DNS name, the distinguished name of the domain controller computer object, or the distinguished name of the domain controller server object, for example, the distinguished name CN=DC5,OU=Domain Controllers,DC=contoso,DC=com or the DNS name DC5.contoso.com.
+ 嚴格+strict 嚴格複寫一致性登錄項目。Enables the Strict Replication Consistency registry entry.
如果您不使用套用到所有網域控制站的變更,請為每個您想要讓嚴格複寫一致性的網域控制站重複步驟 2。 命名選項和資訊的語法<DC_LIST>在命令提示字元中輸入的參數,repadmin /listhelp。有關的語法/regkey/removelingeringobjects參數,輸入repadmin /experthelp If you do not use to apply the change to all domain controllers, repeat step 2 for every domain controller on which you want to enable strict replication consistency. For more naming options and information about the syntax of the <DC_LIST> parameter, at the command prompt type repadmin /listhelp. For information about the syntax of the /regkey and /removelingeringobjects parameters, type repadmin /experthelp.
使用 Regedit 讓嚴格複寫一致性 使用 Repadmin 或者,您可以編輯登錄直接讓嚴格複寫一致性。需要執行的是 Windows Server 2003 SP1 早的 Windows Server 版本網域控制站登錄方法。複寫一致性的設定會儲存在嚴格複寫一致性中的輸入HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNTDSParameters 的值為嚴格複寫一致性登錄如下所示: 值:1 (0來停用) 預設:1中新的 Windows Server 2003(功能)或nextref_longhorincludes > 樹系;否則0 的資料類型:呼叫完成 需求: 中的成員資格網域系統管理員,或相當於,才能完成此程序最小值。 Use Regedit to enable strict replication consistency As an alternative to using Repadmin, you can enable strict replication consistency by editing the registry directly. The registry method is required for a domain controller that is running a version of Windows Server that is earlier than Windows Server 2003 with SP1. The setting for replication consistency is stored in the Strict Replication Consistency entry in HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNTDSParameters. The values for the Strict Replication Consistency registry entry are as follows: Value: 1 (0 to disable) Default: 1 (enabled) in a new Windows Server 2003 or nextref_longhorincludes> forest; otherwise 0. Data type: REG_DWORD Requirements: Membership in Domain Admins, or equivalent, is the minimum required to complete this procedure. review_detailincludes > 工具:Regedit.exe ,不直接編輯登錄除非另有其他的替代方案建議。變更登錄無法驗證再套用,如此一來,不正確的值可以儲存或 windows 作業系統。這可能導致處於無法復原錯誤,系統中。可能的話,請使用群組原則」或其他 Windows 工具,例如 Microsoft Management Console (MMC),以完成任務,而非編輯登錄直接。如果您必須編輯登錄,小心謹慎。 嚴格複寫一致性,以便使用 Regedit 以系統管理員身分開放 Regedit:按一下[開始],然後在開始搜尋,輸入regedit。在頂端[開始]功能表上,以滑鼠右鍵按一下regedit.exe,,然後按一下 [以系統管理員身分執行。在使用者 Account 控制項對話方塊中,提供的認證網域系統管理員」,然後再按一下[確定] 瀏覽到嚴格複寫一致性中的項目HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNTDSParameters 中的設定值嚴格複寫一致性來項目1. review_detailincludes> Tool: Regedit.exe It is recommended that you do not directly edit the registry unless there is no other alternative. Modifications to the registry are not validated by the registry editor or by Windows before they are applied, and as a result, incorrect values can be stored. This can result in unrecoverable errors in the system. When possible, use Group Policy or other Windows tools, such as Microsoft Management Console (MMC), to accomplish tasks rather than editing the registry directly. If you must edit the registry, use extreme caution. To use Regedit to enable strict replication consistency Open Regedit as an administrator: Click Start and then, in Start Search, type regedit. At the top of the Start menu, right-click regedit.exe, and then click Run as administrator. In the User Account Control dialog box, provide Domain Admins credentials, and then click OK. Navigate to the Strict Replication Consistency entry in HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNTDSParameters. Set the value in the Strict Replication Consistency entry to 1.
確保的功能升級新的網域控制站的一致性嚴格複寫 如果您的升級最初建立使用電腦執行的 Windows 2000 Server 的樹系,您應該確定的樹系的設定,可讓嚴格複寫一致性,以避免延遲物件升級新的網域控制站在。 Ensure that strict replication consistency is enabled for newly promoted domain controllers If you are upgrading a forest that was originally created using a computer running Windows 2000 Server, you should ensure that the forest is configured to enable strict replication consistency on newly promoted domain controllers to help avoid lingering objects. 在您更新到 Windows Server 2008 AD DS 網域升級 Active Directory 網域中所述的樹系之後 (http://go.microsoft.com/fwlink/?LinkId=89032http://go.microsoft.com/fwlink/?LinkId=89032),建立所有新的網域控制站之後新增到樹系的嚴格複寫一致性停用。After you update the forest as described in Upgrading Active Directory Domains to Windows Server 2008 AD DS Domains (http://go.microsoft.com/fwlink/?LinkId=89032http://go.microsoft.com/fwlink/?LinkId=89032), all new domain controllers that you subsequently add to the forest are created with strict replication consistency disabled. 不過,您可以執行的樹系設定變更,讓新的網域控制站有嚴格複寫一致性支援。However, you can implement a forest configuration change that causes new domain controllers to have strict replication consistency enabled. 為了確保新的網域控制站您新增到樹系都支援嚴格複寫一致性,您可以使用 Ldifde.exe 工具來建立之子-森林設定 directory 磁碟分割中的物件。To ensure that new domain controllers that you add to the forest have strict replication consistency enabled, you can use the Ldifde.exe tool to create an object in the configuration directory partition of the forest. 此物件會負責讓上任何的 Windows Server 2003 嚴格複寫一致性或nextref_longhorincludes > 升級到樹系網域控制站。 您所建立的物件是操作 GUID 下列名稱: DATA-CN = 94fdebc6-8eeb-4640-80de-ec52b9ca17fa,DATA-CN = 作業,DATA-CN = ForestUpdates,DATA-CN = 設定,俠 =<ForestRootDomain> 您可以使用下列程序森林中的任何網域控制站在這個物件加入設定 directory 磁碟分割。 中的成員資格企業系統管理員」,或相當於,才能完成此程序最小值。This object is responsible for enabling strict replication consistency on any Windows Server 2003 or nextref_longhorincludes> domain controller that is promoted into the forest. The object that you create is an operational GUID with the following name: CN=94fdebc6-8eeb-4640-80de-ec52b9ca17fa,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=<ForestRootDomain> You can use the following procedure on any domain controller in the forest to add this object to the configuration directory partition. Membership in Enterprise Admins, or equivalent, is the minimum required to complete this procedure. review_detailincludes > 來建立物件,以確保嚴格複寫一致性新的網域控制站在 在文字編輯器中,例如「記事本」,會建立下列文字檔案: dn: CN=94fdebc6-8eeb-4640-80de-ec52b9ca17fa,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=<ForestRootDomain> changetype: add objectClass: container showInAdvancedViewOnly: TRUE name: 94fdebc6-8eeb-4640-80de-ec52b9ca17fa objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=<ForestRootDomain> 位置<ForestRootDomain>包含所有的網域元件 (俠 =) 的樹系根網域中,例如 contoso.com 樹系俠 = contoso 俠 = com;fineartschool.net 樹系俠 = fineartschool,DC = 網路。 開放命令提示字元以系統管理員身分:上[開始] ] 功能表,以滑鼠右鍵按一下命令提示字元,,然後按一下 [以系統管理員身分執行。如果使用者 Account 控制項對話方塊中顯示,提供的認證企業系統管理員,如有需要,然後再按一下繼續] 命令提示字元中,輸入下列命令,並按一下 ENTER: ldifde-i f<路徑><檔案名稱> review_detailincludes> To create the object that ensures strict replication consistency on new domain controllers In a text editor, such as Notepad, create the following text file: dn: CN=94fdebc6-8eeb-4640-80de-ec52b9ca17fa,CN=Operations,CN=ForestUpdates,CN=Configuration,DC=<ForestRootDomain> changetype: add objectClass: container showInAdvancedViewOnly: TRUE name: 94fdebc6-8eeb-4640-80de-ec52b9ca17fa objectCategory: CN=Container,CN=Schema,CN=Configuration,DC=<ForestRootDomain> Where <ForestRootDomain> contains all domain components (DC=) of the forest root domain, for example, for the contoso.com forest, DC=contoso,DC=com; for the fineartschool.net forest, DC=fineartschool,DC=net. Open a Command Prompt as an administrator: On the Start menu, right-click Command Prompt, and then click Run as administrator. If the User Account Control dialog box appears, provide Enterprise Admins credentials, if required, and then click Continue. At the command prompt, type the following command, and then press ENTER: ldifde -i -f <Path><FileName>
參數Parameter 描述Description
-i-i 指定匯入模式。Specifies the import mode. 如果您不指定匯入模式,預設模式是匯出。If the import mode is not specified, the default mode is export.
-f-f 辨識匯入或匯出檔案的名稱。Identifies the import or export file name.
<路徑><檔案名稱><Path><FileName> 路徑和您在步驟 1,例如 C:ldifde.txt 建立匯入檔案的名稱。The path and name of the import file that you created in step 1, for example, C:ldifde.txt.
使用 Ldifde 相關資訊,會看到 LDIFDE (http://go.microsoft.com/fwlink/?LinkId=42656http://go.microsoft.com/fwlink/?LinkId=42656)。For information about using Ldifde, see LDIFDE (http://go.microsoft.com/fwlink/?LinkId=42656http://go.microsoft.com/fwlink/?LinkId=42656).