如何手工转移WINDOWS AD域内 Inter-Site Topology Generator (ISTG)

简介: 升级和迁移AD域控,总免不了这些琐碎手工之事。 还好,网络大把资源可以使用。 http://www.expta.com/2011/03/how-to-manually-move-istg-role-to.

升级和迁移AD域控,总免不了这些琐碎手工之事。

还好,网络大把资源可以使用。

http://www.expta.com/2011/03/how-to-manually-move-istg-role-to.html

The Knowledge Consistency Checker (KCC) is an Active Directory component that is responsible for the generation of the replication topology between domain controllers. One domain controller per site holds the Inter-Site Topology Generator (ISTG) role, which is responsible for managing the inbound replication connection objects for all bridgehead servers in the site in which it is located.

If you have more than one domain controller in your organization, the ISTG is the DC responsible for creating the <automatically generated> connection objects that you see in Active Directory Sites and Services, as shown below:

 

The ISTG role is fairly "sticky".  The first domain controller promoted in a site takes on the ISTG role, and the role does not change as additional domain controllers are added to the site.  If the current ISTG becomes unavailable for 60 minutes, an election is held by the other DCs in the site to appoint a new ISTG.  This can sometimes cause problems for Active Directory replication. 

Consider the following scenario. Your domain contains two sites, SiteA and SiteB.  Each site has two DCs for redundancy and high availability - DC1 and DC2 in SiteA, and DC3 and DC4 in SiteB.  If both sites are connected to each other using DC1 and DC3 and those servers happen to be the ISTG servers for the two sites, it will take over 60 minutes to create new automatic connections if either of those two servers becomes unavailable.  To overcome this, manually move the ISTG to another server.  Here's how to do it.

  1. Open ADSIEDIT.msc
  2. Expand Configuration [DomainController].
  3. Expand CN=Configuration,DC=<domain>,DC=<com>.
  4. Expand CN=Sites.
  5. Highlight CN=<sitename> for the site where you want to change the ISTG Server.
  6. In the details pane, right-click on CN=NTDS Site Settings and select Properties.
  7. Locate the interSiteTopologyGenerator attribute and you will see which Domain Controller is designated as the ISTG server.
  8. To change the server, click Edit and then change the server name, as shown below.
 
目录
相关文章
|
3月前
|
存储 安全 网络协议
Windows安全加固-AD建立与加入
Windows安全加固-AD建立与加入
56 0
|
弹性计算 网络协议 安全
将Windows系统机器加入AD域
一台Windows服务器需要加入到Active Directory域后才能通过AD域服务来管理。本文介绍了如何将一台Windows服务器加入已有的AD域。
4486 0
将Windows系统机器加入AD域
|
安全 文件存储 数据安全/隐私保护
从Windows以AD域用户身份挂载使用阿里云SMB协议文件系统
在完成AD域接入之后,用户即可开始以AD域用户身份挂载使用阿里云SMB协议文件系统了。本文介绍了几种SMB文件系统的挂在方式以及简单的ACL特性使用方法的演示。
5884 0
从Windows以AD域用户身份挂载使用阿里云SMB协议文件系统
|
网络协议 文件存储 数据安全/隐私保护
通过安装和配置AD域解决Windows Server 2016的IIS无法加载SMB文件卷文件的问题
通过客户反馈我们发现Windows Server 2016的IIS无法加载SMB文件卷的文件,显示的错误是:未能加载文件或程序集。经过我们不断研究和实验,发现在安装和配置好AD域之后,2016上IIS加载文件卷文件发生错误的问题可以得到解决。
4118 0
通过安装和配置AD域解决Windows Server 2016的IIS无法加载SMB文件卷文件的问题
|
网络协议 数据安全/隐私保护 Windows
|
存储 数据库 数据安全/隐私保护
|
存储 网络协议 数据库
|
Web App开发 测试技术 数据安全/隐私保护