Monday, February 13, 2012

AD synchronization interval with SQL Server

Hi. Please help.
Background:
A user changes their Active Directory windows password on logon and then
attempts to connect to SQL Server but fails. Once a manual synchronisation o
f
the windows accounts on SQL server are done then the user can authenticate
again.
Question:
How long does AD take to auto synchronise with SQL (or vice versa)? Can this
value be changed? How?
Many thanksMorne wrote:

> Background:
> A user changes their Active Directory windows password on logon and then
> attempts to connect to SQL Server but fails. Once a manual synchronisation
> of
> the windows accounts on SQL server are done then the user can authenticate
> again.
> Question:
> How long does AD take to auto synchronise with SQL (or vice versa)? Can
> this
> value be changed? How?
I believe the delay is due to AD replication. The DC that SQL Server used
for authentication must not have been the DC the user authenticated to and
the new password had not yet replicated. Perhaps the SQL Server is in
another site. I don't know of a solution, other than to force replication,
perhaps with the repadmin utility on the DC (which is not of help to the
user).
Richard Mueller
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net
--|||Thanks Richard
I'll look into it. Appreciated.
Morne
"Richard Mueller [MVP]" wrote:

> Morne wrote:
>
> I believe the delay is due to AD replication. The DC that SQL Server used
> for authentication must not have been the DC the user authenticated to and
> the new password had not yet replicated. Perhaps the SQL Server is in
> another site. I don't know of a solution, other than to force replication,
> perhaps with the repadmin utility on the DC (which is not of help to the
> user).
> --
> Richard Mueller
> Microsoft MVP Scripting and ADSI
> Hilltop Lab - http://www.rlmueller.net
> --
>
>

No comments:

Post a Comment