windowswideopen.com

This error can occur :

When the local DC tries to establish a replication link with it’s replication partner and it fails.

In that case, repadmin/showreps shows no inbound neighbors, so it doesn’t tell this error. To see it, go to the “Directory Service” event log in which the following event is logged:

Event ID 1265

The attempt to establish a replication link with parameters

Partition: DC=domain,DC=enterprise,DC=com

Source DSA DN: CN=NTDS Settings,CN=HubDC,CN=Servers,CN=HubSite,CN=Sites,CN=Configuration,DC=enterprise,DC=com

Source DSA Address: 62d85225-76bf-4b46-b929-25a1bb295f51._msdcs.enterprise.com

Inter-site Transport (if any): CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=enterprise,DC=com

failed with the following status:

There is a time difference between the client and server.

The record data is the status code. This operation will be retried.

When a replication link exists between the two DCs, but replication cannot be properly performed.

In that case, as described in the first section, repadmin/showreps shows inbound neighbors, but the status of the last replication for one or several naming contexts returns “Last attempt at <date - time> failed” with the “There is a time difference between the client and the server ” error. Then no event is logged in the event log.

This error generally happens because the local DC failed to synchronize it’s time, generally because of an access denied. In this case, do the following :

 Try to synchronize the time on the local DC using :

Net time \\server /set

This should fail with an “Access denied” error.

Filed under: Active Directory