The Knowledge Consistency Checker (KCC) has detected problems with the following directory partition.

Directory partition:
CN=Configuration,DC=domainname,DC=co,DC=uk

There is insufficient site connectivity information in Active Directory Sites and Services for the KCC to create a spanning tree replication topology.

Or, one or more domain controllers with this directory partition are unable to replicate the directory partition information. This is probably due to inaccessible domain controllers.

Cause:
Two possible causes, either you have VPN's connecting all the sites and there is an MTU problem OR there is a dead domain controller that the other domain controllers cannot see.

Fix:
1. Install Security Update for Windows Server 2003 (KB913446)
2. Added the following DWORD values under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP\Parameters:
Value name: EnablePMTUBHDetect
Value: 1

Value name: MTU
Value: 1360

4. Open Active Directory Sites and Services - expand everything and make sure there are no domain controllers listed that no longer exist, either as servers or displayed on a replication link.

Comments: