Repadmin Bind
Repadmin Bind
Connects to, and displays the replication features for, a directory partition on a domain controller.
repadmin/bind [DC_LIST]
Parameters
DC_LIST
Specifies the host name of a domain controller, or a list of domain controllers separated by a
space. See above for detailed syntax.
top topTop of page
Repadmin bridgeheads
Lists the bridgehead servers for a specified site.
repadmin/failcache [DC_LIST]
Parameters
DC_LIST
Specifies the host name of a domain controller or a list of domain controllers separated by a
space. See above for detailed syntax.
top topTop of page
Repadmin istg
Returns the server name of the ISTG server for a specified site.
Important:
Setting these options might impair or disable the ability of the KCC to calculate the topology
automatically. These options are intended for use by advanced administrators for special
situations. If you set these options, document the settings carefully to ensure that the KCC
functions as expected and can be restored to default functionality if necessary.
repadmin /options [DC] [{+|-}IS_GC] [{+|-}DISABLE_INBOUND_REPL]
[{+|-}DISABLE_OUTBOUND_REPL] [{+|-}DISABLE_NTDSCONN_XLATE]
Parameters
DC
Specifies the host name of the domain controller on which to set the NTDS Settings options.
{+|-}IS_GC
Adds or removes the global catalog.
{+|-}DISABLE_INBOUND_REPL
Stops (+) or restarts (-) inbound replication.
{+|-}DISABLE_OUTBOUND_REPL
Stops (+) or restarts (-) outbound replication.
{+|-}DISABLE_NTDSCONN_XLATE
Prevents connections from forming replication partnerships.
top topTop of page
Repadmin queue
Displays tasks waiting in the replication queue.
repadmin /queue [DC_LIST]
Parameters
DC_LIST
Specifies the host name of a domain controller, or a list of domain controllers separated by a
space. See above for detailed syntax.
top topTop of page
Repadmin querysites
Uses routing information to determine cost of a route from a specified site to another specified
site or sites.
repadmin/querysitesFromSiteRDNToSite1RDN
[ToSite2RDN...
Parameters
Note
• The Relative Distinguished Names (RDNs) used in this command are case-sensitive.
FromSiteRDN
Specifies the RDN of the site from which the cost is calculated.
ToSiteRDN
Specifies the RDN of the site to which the cost is calculated.
Note
• The querysites parameter does not allow the use of alternate credentials.
Important:
To use the repadmin /removelingeringobjects command, both source and destination domain
controllers must be running Windows Server 2003.
repadmin/removelingeringobjectsDestination_DC_ListSourceDCGUIDNamingContextDN/ad
visory_mode
Parameters
Note:
"Destination" in the context of this syntax does not indicate a destination replication partner, but
rather a source replication partner that is suspected of having lingering objects. The term
"destination" identifies the server as the focus of the lingering object removal process.
Destination_DC_List
Specifies the host name of a destination domain controller, a list of domain controllers separated
by a space, or * for all domain controllers in the enterprise. See above for detailed syntax.
SourceDCGUID
Specifies the GUID of the source (reference) domain controller that will be used to identify
objects that are outdated (lingering) on the destination. Obtain the GUID by running repadmin
/showrepl against the source domain controller that you are using as the reference server.
NamingContextDN
Specifies the distinguished name of the directory partition from which the lingering objects are to
be removed.
advisory_mode
Prints a list of objects that are found in the directory of the destination domain controller that are
not found in the directory of the source domain controller. Objects are not removed if this
parameter is used.
top topTop of page
Repadmin replicate
Starts a replication event for the specified directory partition between the source and destination
domain controllers. The source UUID can be determined when viewing the replication partners
by using the Repadmin showrepl operation.
Syntax 1
repadmin/replicateDestination_DC_LIST [/force]
[/async] [/full] [/addref] [/allsources]
Parameters
Destination_DC_LIST
Specifies the host name of the destination domain controller (Directory Server Agent) with
which you want to replicate. See above for detailed syntax on the DC_LIST parameter. This
parameter cannot be used with /allsource.
Source_DC_NAME
Specifies the host name of the source domain controller with which you want to replicate. This
parameter accepts a GUID, GUID-based DNS name, or the name of a server object.
/force
This parameter is used to override the Disable Replication option on a server.
/async
Specifies that the replication will be asynchronous. This means that Repadmin starts the
replication event, but it does not expect an immediate response from the destination domain
controller. Use this parameter when there are slow links between domain controllers.
/full
Forces a full replication of all objects from the destination domain controller.
/addref
Directs the source to check for a notification entry on the source. If the source does not have a
notification entry for this destination, one is added.
/allsources
A given destination can have multiple sources for the same naming context. Directs the
destination to sync with all sources instead of just one. This parameter cannot be used with
Destination_DC_LIST
/readonly
This parameter is ignored by the /replicate operation.
top topTop of page
Repadmin replsingleobj
Replicates a single object between any two domain controllers that have partitions in common.
The two domain controllers do not have a replication agreement. Replication agreements can be
shown by using the Repadmin /showrepl command.
repadmin /showcertDC_LIST
Parameters
DC_LIST
Specifies the host name of a domain controller or a list of domain controllers separated by a
space that the object will be replicated to. See above for detailed syntax. This is a required
parameter.
top topTop of page
Repadmin showchanges
Displays changes from a specified directory partition or changes to a specified object. Syntax 1
saves changes to a directory partition. If this information is saved to a file the getchanges
operation can be run again for comparison. Syntax 2 lists changes to a specified object.
Syntax
repadmin/showchangesSourceDCNamingContext
[/cookie:File] [/atts:attribute,attribute,...]
Syntax
repadmin
/showchangesDestDCSourceDCObjectGUIDNamingContext [/verbose] [/statistics]
[/noincremental] [/objectsecurity] [/ancestors] [/atts: attribute1,attribute2,...] [/filter: ldap
filter]
Parameters
DestDC
Specifies the host name of the destination domain controller from which to enumerate the host
domain controllers.
SourceDC
Specifies the host name of the domain controller that hosts the directory partition whose changes
you want to view.
NamingContext
Specifies the distinguished name of the directory partition.
/cookie:File
Specifies a name for the file to which list changes are saved.
/atts:attribute1attributes...
Returns only the attributes specified. Separate each listed attribute with a comma.
SourceDCObjectGUID
Specifies the unique hexadecimal number that identifies the object whose changes will be listed.
The objectGUID can be retrieved by using the showrepl operation.
/verbose
Lists detailed information.
/statistics
Displays a summary of information about changes instead of a list of individual changes.
/noincremental
Returns changes in value change format, which lists current values for attributes as well what
attributes have been added or deleted. If not specified, changes are returned in attribute change
format, which shows only the current value of the attribute.
/objectsecurity
Overrides the need for the Get Changes right to the directory partition. By default this right is
needed to run the GetChanges parameter. However, only changes that the currently logged on
user has the rights to view are displayed.
/ancestors
Returns changes in USN order.
/filter:ldap filter
Returns only those changes that meet the filter requirements.
Note
• The information from Syntax 1 can be saved to a file for later comparison.
repadmin/showoutcalls [DC_LIST]
Parameters
DC_LIST
Specifies the host name of a domain controller or a list of domain controllers separated by a
space that the object will be replicated to. See above for detailed syntax.
top topTop of page
Repadmin showproxy
Lists cross domain move proxy objects. When an object is moved to another domain, a marker is
left in the old domain indicating that the object used to be there. This is called the proxy.
Syntax
repadmin/showutdvecDC_LIST NamingContext
[/nocache] [/latency]
Parameters
DC_LIST
Specifies the host name of a domain controller or a list of domain controllers separated by a
space that the object will be replicated to. See above for detailed syntax.
NamingContext
Specifies the distinguished name of the directory partition.
/nocache
Specifies that GUIDs are left in hexadecimal form. By default GUIDs are translated into strings.
/latency
Sorts the information by the time required to complete the replication. By default the information
is sorted by USN.
top topTop of page
Repadmin showvalue
Displays the values of the type, last modified time, originating DC, and distinguished name of a
specified object.
Important:
Setting these options might impair or disable the ability of the KCC to calculate the topology
automatically. These options are intended for use by advanced administrators for special
situations. If you set these options, document the settings carefully to ensure that the KCC
functions as expected and can be restored to default functionality if necessary.
repadmin /siteoptions [DC] [/site:SiteName]
[{+|-}IS_AUTO_TOPOLOGY_DISABLED]
[{+|-}IS_TOPL_CLEANUP_DISABLED] [{+|-}IS_TOPL_MIN_HOPS_DISABLED]
[{+|-}IS_TOPL_DETECT_STALE_DISABLED]
[{+|-}IS_INTER_SITE_AUTO_TOPOLOGY_DISABLED]
[{+|-}IS_GROUP_CACHING_ENABLED] [{+|-}FORCE_KCC_WHISTLER_BEHAVIOR]
[{+|-}FORCE_KCC_W2K_ELECTION] [{+|-}IS_RAND_BH_SELECTION_DISABLED]
[{+|-}IS_SCHEDULE_HASHING_ENABLED]
[{+|-}IS_REDUNDANT_SERVER_TOPOLOGY_ENABLED]
{+|-}W2K3_IGNORE_SCHEDULES {+|-}W2K3_BRIDGES_REQUIRED
Parameters
DC
Specifies the host name of the domain controller on which to set the site options.
SiteName
The site that the option setting affects.
{+|-}IS_AUTO_TOPOLOGY_DISABLED
When enabled, prevents the KCC from generating intrasite connections on all servers in the site.
Disable this option if you use manual connections and do not want the KCC to build connections
automatically.
{+|-}IS_TOPL_CLEANUP_DISABLED
When enabled, prevents the KCC from removing connection objects that it does not need.
Disable this option if you want to take responsibility for removing old redundant connections.
Alternatively, to control or augment the topology, you can use manual connections, which the
KCC does not delete.
{+|-}IS_TOPL_MIN_HOPS_DISABLED
When enabled, prevents the KCC from generating optimizing connections in the ring topology of
intrasite replication. Optimizing connections reduce the replication latency in the site and
disabling them is not recommended.
{+|-}IS_TOPL_DETECT_STALE_DISABLED
Prevents the KCC from excluding servers that are unreachable from the topology; that is, the
KCC does use an alternate server to reroute replication. Use this option only if network
communication is very unstable and brief outages are expected.
{+|-}IS_INTER_SITE_AUTO_TOPOLOGY_DISABLED
Prevents the KCC that functions as the intersite topology generator (ISTG) from generating
connections for intersite replication. Use this option when you want to create manual intersite
connections (disable the ISTG) but retain the KCC to generate intrasite connections.
{+|-}IS_GROUP_CACHING_ENABLED
Disables Universal Group Membership Caching in the site.
{+|-}FORCE_KCC_WHISTLER_BEHAVIOR
Implements KCC operation that is consistent with Windows Server 2003 forest functional level.
This option can be set if all domain controllers in the site are running Windows Server 2003.
{+|-}FORCE_KCC_W2K_ELECTION
Off by default. When enabled, implements the Windows 2000 Server method of ISTG selection.
{+|-}IS_RAND_BH_SELECTION_DISABLED
Implements the Windows 2000 Server method of selecting a single bridgehead server per
directory partition and transport.
{+|-}IS_SCHEDULE_HASHING_ENABLED
Spreads replication start times randomly across the entire schedule interval rather than just the
first quarter of the interval.
{+|-}IS_REDUNDANT_SERVER_TOPOLOGY_ENABLED
Creates redundant connections between sites before a failure takes place. When enabled, disables
KCC failover. Requires that automatic detection of failed connections also be disabled
(+IS_TOPL_DETECT_STALE_DISABLED).
{+|-}W2K3_IGNORE_SCHEDULES
When the forest functional level Windows Server 2003 or Windows Server 2003 interim is in
effect, provides KCC control of the ability to ignore schedules (replication occurs at the
designated intervals and is always available).
{+|-}W2K3_BRIDGES_REQUIRED
When the forest functional level Windows Server 2003 or Windows Server 2003 interim is in
effect, provides KCC control of the ability to enable or disable site link bridging.
For more information about using site options, see Planning Chapter 3, "Planning the Physical
Structure for a Branch Office Deployment" in the Windows Server 2003 Active Directory
Branch Office GuideWindows Server 2003 Active Directory Branch Office Guide on the
Microsoft Web site (http://go.microsoft.com/fwlink/?LinkId=28523).
top topTop of page
Repadmin syncall
Synchronizes a specified domain controller with all replication partners.