We have a single AD domain with 14 domain controllers, and I have
noticed on two occasions where a single domain controller is not
syncing passwords to the Identity Vault correctly. If I go into the
Password Filters utility on the host DC it shows all password filters
as running, however if I specify in AD Users and Computers to connect
to the DC that is having issues, password sync does not work. In each
of these two cases I have not been able to locate any sort of error on
the affected DC or the DC that is the PW Sync host...the only way we
have noticed is when support staff is reporting issues not being able
to get passwords in sync. In both cases a reboot of the affected DC
has resolved. Has anyone else seen this behavior? Does anyone know of
a way to monitor this and trigger notification? Thanks in advance.