| Event Id | 13557 |
| Source | NtFrs |
| Description | The File Replication Service has detected a duplicate connection object between this computer "Computer 1" and a computer named "Computer 2". This was detected for the following replica set: "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" |
| Event Information | According to Microsoft: CAUSE: Duplicate NTDS connections objects can block replication of files and folders between FRS replica members when duplicate connection objects exist. RESOLUTION: Delete duplicate connections objects between direct replication partners that are noted in the event text. This is not allowed and replication does not occur between these two computers until the duplicate connection objects are removed.It is possible that this is a transient issue caused by Active Directory replication delays associated with updating FRS configuration objects. If file replication does not take place after an appropriate waiting time (which could be several hours if cross-site Active Directory replication is required), you must manually delete the duplicate connection objects by following these steps: 1. Start the Active Directory Sites and Services snap-in. 2. Click Sites, click Computer 1s site name, click Servers, click Computer 1, and then click NTDS Settings. 3. Look for duplicate connections from Computer 1 in site Computer 1s site name. 4. Delete all but one of the connections. |
| Reference Links | NTFRS Event ID 13557 Is Recorded When Duplicate NTDS Connection Objects Exist |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.