This event documents additional REPAIR PROCEDURES to resolve the NTDS KCC Event 1311 on a read-only Active Directory Domain ...

This event documents additional REPAIR PROCEDURES to resolve the NTDS KCC Event 1311 on a read-only Active Directory Domain Controller.



Local Site:
%1



User Action:



The user action for resolving the NTDS KCC event 1311 on a read-only Active Directory Domain Controller is identical to the action plan used on a writable (full) Active Directory Domain Controller with the following additional requirements:



1.    If NTDS KCC event 1789 is logged adjacent to the NTDS KCC 1311 and NTDS KCC 2904 events, use the Active Directory Sites and Services snap-in focused on a writable Active Directory Domain Controller to add this site to an appropriate site-link, then execute steps 4 and 5.



2.    The 1311 event has many possible causes. Execute the action plan in the "Event Log Online Help" link of an adjacent 1311 event.  Additional information may be available on http://support.microsoft.com  or referring to MSKB article http://support.microsoft.com/default.aspx?scid=kb;EN-US;307593.



3.    All corrective changes that resolve the 1311 event must be made on a Active Directory Domain Controller that hosts a writable copy of the Active Directory partition or group policy being modified.



4.    If the read-only Active Directory Domain Controller logging the 2904 / 1311 event does not have a valid "repsFrom" source Active Directory Domain Controller, run the following command, otherwise proceed to step 5:



                  [Note: This step requires enterprise administrator credentials]



                  repadmin /add    /read-only /selsecrets



5.    Trigger replication from the writable Active Directory Domain Controller updated in previous steps to this read-only Active Directory Domain Controller using the following command:



                  [Note: This step requires enterprise administrator credentials]



                  repadmin /replicate    



                  OR



                  Alternatively, use the Active Directory Sites and Services UI by performing the following steps:



                  - Click the site that has this read-only Active Directory Domain Controller.

                  - Click replicate configuration from/to the selected Active Directory Domain Controller.