Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: NTDS Replication|
The local domain controller failed to retrieve the changes requested for the following directory partition. As a result, it was unable to send the change requests to the domain controller at the following network address.
Directory partition: <directory partition>
Network address: <network address>
Extended request code: 0
Error value: 8451
The replication operation encountered a database error.
The only partition that is failing to replicate is the <partition name> partition.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is NTDS and what are the roles of its components?
See ME943576 for a hotfix applicable to Microsoft Windows Server 2003.
This event may incorrectly be logged. See ME953392 for a hotfix applicable to Windows Server 2008.
This event may occur when there are many proxy addresses under the Active Directory objects that are referenced in the event. Each of these objects has a non-linked multivalued attribute. When the values of these non-linked attributes exceed the maximum attribute limit for the forest functional level, the server cannot process the object. See ME914036 to fix this issue.
As per Microsoft: "This problem may occur if the global catalogs in your forest contain an object that has a security descriptor that has been corrupted or is not in the correct format. In particular, this problem occurs if the msExchSecurityDescriptor property has been written to the object instead of to the NTSecurityDescriptor (NTDS) property. Microsoft Windows 2000 Service Pack 4 or later does not permit the msExchSecurityDescriptor property to be written to the global catalog object. However, if the msExchSecurityDescriptor property already exists in the global catalog, it is not removed by a computer that is running Windows 2000 Service Pack 4 or later". See ME832851 for a hotfix.
|Private comment: Subscribers only. See example of private comment|
|Links: ME832851, ME914036, ME943576, ME953392|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated