Hi All... I have a Domain controller and an Additional domain controller for my active directory domain. ADC is fully replicated with DC and whenever any change is made in anyone's database both get auto replicated. They are in the default first site. I havent configured any site and services for them. The problem i am having is the implementation of one GPO setting. I have login / logoff script for recording the login and logoff details of the clients. If i shutdown ADC everything works fine, but if i also turn on the ADC in my network this script doesn't works fine. Its works for some users while doesn't work for the others.Anyhow the reality is if i shut down the ADC, this scripts start working ok. May be some other GPO setting not getting implemented, but i dnt have much detailed GPOs. Both the DC and ADC are on Virtual Machines. If i restart them It stays veryyy long at "Preparing network conecction" while coming up more than 5 mins. May be its trying to do something in the background and timing out in the end.. juts a thought. At DC i also see ths message after i shut down ADC in Even viewer -> File replication service ....." The File replication service is no longer preventing this computer xyz from becoming a domain controller. The system volume has been successfully initialized.............." I think i have made the correct configuration of DC and ADC. All the FSMO roles are with DC. Still, some one want to confirm this thing i can provide additional required info. Please help me out. Regards

http://support.microsoft.com/kb/555381 CAUSE The Windows Server 2003 SP1 Firewall, either on this computer or the other Domain Controller(s), is preventing client access to the Active Directory or preventing Active Directory replication. RESOLUTION..........See site ^^^^^^

But everythng is getting replicated to ADC, in the active directory and even in the DNS. Moreover firewall service is not even running , either on DC or ADC

That was one of the sites that I saw when I searched the error message in google. Repeat the search. Maybe you'll see something that I missed.

FSMO, which one is the master? Did you set the policy from the master?