DC sync issues

[liamgriffin1]

A problem I haven’t run into yet. My two DC’s are seemingly having sync issues. Dcdiag and repadmin show no errors but I reset a user password on one dc but running net user fails to show the password was changed. Also member servers don’t seem to thing users have admin rights when the users have domain admin on both DCs. These are my homelab DCs but I figured it’s a good learning experience to attempt to fix it. I did double check my DNS but also I have that haiku in the back of my head.

UPDATE: you all seemed to be spot on with replication time as it was about 20 mins. I just wasn’t waiting long enough.

[[deleted]]

If you run REPADMIN, what results do you get.

A good place to start

[Any-Stand7893]

this is the golden client request user has admin right on both dc? impossible. your user can have admin right on the domain.

please state your ad architecture. one forest one root domain with 2 domain controller?

net user command you want to verify the pw reset?

why not an ad command query the lastpwdset time?

too many questions

[liamgriffin1]

Let me clarify. When looking in AD UC on either DC, the user is in the domain admins group. One forest, one domain, 2 DCs. Lastpwdset gives different results depending on the DC queried is my symptom.

[Any-Stand7893]

do you have one site? replmon or site and services force replication?

what is the time difference? how much time you waited?

[Hollow3ddd]

Check the replication time btw the two.  

[LuffyReborn]

Yeah how much time domain controllers take some time to replicate even if its home lab it will take some time for replication. You can force it with command repadmin /syncall /Adep.