How do I disable the Knowledge Consistency Checker?

A. The FAQ How does intrasite replication work in Windows 2000? explains how the Knowledge Consistency Checker (KCC) automatically creates and maintains connection objects for intra- and intersite replication. To manually maintain connection objects (which I don’t recommend), you must disable the KCC.

To disable the KCC, use the Microsoft Windows 2000 Resource Kit’s LDP tool. This program is in Win2K’s %SystemDrive%:\Program Files\Support Tools folder.

  1. Start ldp.exe.
  2. From the Connection menu, select Connect.
  3. Enter the domain controller’s DNS name, leave the port as 389 (LDAP), and make sure the Connectionless checkbox is clear. Click OK.
  4. Some text will appear in the rightmost pane. Next, select Bind from the Connection menu.
  5. Enter an Administrator username, password, and domain, as the Screen shows. Click OK.

  6. Click here to view image

  7. From the View menu, select Tree.
  8. A dialog box will prompt you for the base distinguished name (DN), which includes a site and your domain. For example, in the London site I would enter


  9. Expand the route, and double-click CN=NTDS Site Settings. The results will display in the rightmost window. Next, look for the options Attribute. If this attribute is missing or set to 0, you can proceed. Otherwise, you need to contact Microsoft Support for help checking your configuration before you can continue.
  10. The text you see in the rightmost window will look like

  11. Expanding base 'CN=NTDS Site Settings,CN=London,CN=Sites,CN=Configuration,DC=savtech,DC=com'...
    Result : (null)
    Matched DNs:
    Getting 1 entries:
    >> DN: CN=NTDS Site Settings,CN=London,CN=Sites,CN=Configuration,DC=savtech,DC=com

  12. Copy the last line, except the DN: portion, onto the clipboard (e.g., CN=NTDS Site Settings,CN=London,CN=Sites,CN=Configuration,DC=savtech,DC=com).
  13. From the Browse menu, select Modify.
  14. In the Dn field, enter the string you copied in Step 9, as the Screen shows.

  15. In the Attribute field, enter

  16. options

  17. In the Values field, enter the appropriate value. A value of 1 disables automatic intrasite topology generation, a value of 16 disables automatic intersite topology generation, and a value of 17 disables both types of topology generation.
  18. In the Operation field, select Replace.
  19. Click Enter.
  20. Click Run.
  21. Click Close.
  22. The rightmost ldp.exe window will display text such as

  23. ***Call Modify...
    ldap_modify_s(ld, 'CN=NTDS Site Settings,CN=London,CN=Sites,CN=Configuration,DC=savtech,DC=com',\[1\] attrs);
    Modified "CN=NTDS Site Settings,CN=London,CN=Sites,CN=Configuration,DC=savtech,DC=com".

  24. Close ldp.exe.

To check whether the KCC is disabled, use Active Directory Replication Monitor (replmon.exe) to generate a report on the site configuration.

  1. Start replmon.exe.
  2. Right-click Monitored Services in the leftmost window, and select Add Monitored Server from the Context menu.
  3. Select Add the server explicitly by name, and click Next.
  4. Enter the server name, and click Finish.
  5. Right-click the server (under the site), and select Generate Status Report.
  6. Enter a name and location for the log, and click Save.
  7. In the Options field, select Server/DC Configuration Data and Extended Site Configuration, as the Screen shows.

  8. Click OK.
  9. Click OK again to finish.
  10. Open the file you specified, and you’ll see site information such as the following.

  11. ************************************************************************
    Enterprise Data

    Globally Unique Identifiers (GUIDs) for each domain controller in the enterprise
    NOTE: the absence of a GUID means that the server has been demoted.

    Site Name: London
    Site Topology Generator: CN=NTDS Settings,CN=MORPHEUS,CN=Servers,CN=London,CN=Sites,CN=Configuration,DC=savtech,DC=com
    Site Topology Renewal :
    Site Topology Failover :

    Server GUID (used for DNS) : DA644BE4-A8C9-47AF-AC4A-71F8DA4D50F0
    Replication Database GUID (used to identify partner in replication) : DA644BE4-A8C9-47AF-AC4A-71F8DA4D50F0
    DSA Computer Path : CN=MORPHEUS,OU=Domain Controllers,DC=savtech,DC=com
    DSA Schema Location : CN=Schema,CN=Configuration,DC=savtech,DC=com
    DSA Mail Address : [email protected]
    DSA DNS Host Name :
    DSA BridgeHead Transports : IP

    In the Site Options field, the text NTDSSETTINGS_OPT_IS_INTER_SITE_AUTO_TOPOLOGY_DISABLED means intersite topology management is disabled. The text NTDSSETTINGS_OPT_IS_AUTO_TOPOLOGY_DISABLED means intrasite topology management is disabled.

    To reenable the KCC, follow Steps 1 through 20, but set the value in Step 14 to 0. If the KCC is fully enabled, Replmon’s output won’t include Site Options information.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.