Windows Server

Trust No One · Guest

Hi Folks,

I'm hoping someone here can help me out in troubleshooting 2 ultrasound
alerts which I receive intermittently.

The first is an "excessive local changes" alert which I get
intermittently for some of our Active Directory hub domain controllers
in our datacentre. The domain controllers in question are running
Windows 2003 with the pre-SP1 NTRFS update.

The "excessive local changes" alert text says that the alert could be
due to excesive replication, high CPU or disk space usage by the NTFRS
service. However the event log contains no errors in the FRS log, the
SYSVOL size is only around 50Mb, and a brief performance monitor log I
ran does not show undue CPU utilization.

I also ran FRSDiag against one of the listed domain controllers, but
while FRSDiag produced realms of useful info, I could not find any
particular errors listed. Finally the virus scanner we use is McAfee
Virscan Enterprise which is listed as compatible with FRS. Is there
anything else I can try to get to the bottom of this?

The second alert is "Staging files regenerated". This has occured once
so far for 4 of our hub domain controllers. The alert text implies the
staging area was too small and that files were purged from the cache.
The detailed text also mentions that a D2 (non-authoritative restore)
could be the cause.

I've checked the registry and the staging area size is set to the
default of around 650Mb. Furthermore the SYSVOL size is only around
50Mb on the domain controllers, so I don't see the size of the staging
area being the cause. Furthermore no non-authoritative restores were
done by our sysadmins. Is there anything else I can try to troubleshoot
this?

Advice appreciated. The "staging files regenerated" alert has not
reoccured, but there are still the odd occurences of the "excessive
local changes" alert.

--
Peter <X-Files Fan & Active Directory enthusiast>

	Windows Server Forum Index -> DFS and FRS	All times are GMT
Page 1 of 1