Event ID - 1008

Event Id1008
SourceMicrosoft-Windows-ActiveDirectory_DomainService
DescriptionThe Knowledge Consistency Checker (KCC) did not initialize. Consistency updates to the replication topology on the local domain controller have been disabled. The previous replication topology will be used until the local domain controller is restarted. Additional Data Error value: %1 %2
Event InformationAccording to Microsoft :
Cause :
This event is logged when the Knowledge Consistency Checker (KCC) did not initialize.
Resolution :
Correct KCC startup failure
Perform the following procedure using the domain controller that reported the issue.
To perform this procedure, you must have membership in Domain Admins, or you must have been delegated the appropriate authority.
To start the Knowledge Consistency Checker (KCC):
  1. Open a command prompt as an administrator. To open a command prompt as an administrator, click Start. In Start Search, type Command Prompt. At the top of the Start menu, right-click Command Prompt, and then click Run as administrator. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  2. Run the command repadmin /kcc. This command starts the KCC translation of domain controllers to which the local domain controller replicates.
If KCC startup continues to fail, restart the domain controller. Check Event Viewer to see if there are additional messages related to the KCC. If there are error events, use the additional information in the error events to resolve the issue. If there are no error events related to the KCC, it is functioning properly.
Verify :
Perform the following procedure using the domain controller from which you want to verify that Active Directory replication is functioning properly.
To perform this procedure, you must have membership in Domain Admins, or you must have been delegated the appropriate authority.
To verify that the Knowledge Consistency Checker (KCC) started:
  1. Open a command prompt as an administrator. To open a command prompt as an administrator, click Start. In Start Search, type Command Prompt. At the top of the Start menu, right-click Command Prompt, and then click Run as administrator. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  2. Run the command dcdiag /test:kccevent. The command reports KCC status in the form of success or failure reports. If all messages indicate success, the KCC is functioning properly.
Reference LinksEvent ID 1008 from Source Microsoft-Windows-ActiveDirectory_DomainService

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh