The security model is not getting replicated to the Secondary DRA server (NETIQKB72203)

The security model is not getting replicated to the Secondary DRA server

This issue is addressed by adding the MMSRegRestoreType registry key. This key changes the way Directory and Resource Administrator (DRA) handles registry restoration during a Multi-Master Set (MMS) synchronization between primary Administration servers and secondary Administration servers and when you set the NetIQ Administration service to automatically start on secondary Administration servers.

When an MMS synchronization occurs, the primary Administration server exports the registry keys for different modules and transfers these files to computers running as secondary Administration servers. The secondary Administration servers delete the existing registry entries for these modules and restore the registry keys using the files from the primary Administration servers. If the secondary Administration server is running Microsoft Windows Server 2003, Microsoft Windows Server 2003 Service Pack 1,Server 2003 Service Pack 2 and if any of the exported files are large in size, the registry restoration takes a very long time and during this time, the secondary Administration server computer becomes unavailable. Similarly, if the NetIQ Administration service is set to start automatically and if you restart secondary Administration server, the secondary Administration server takes a long time to complete the registry restoration. Setting this registry key ensures DRA restores the registry one key at a time so that the registry is not completely locked during registry restoration. However, the registry restoration may take a longer time to complete and the NetIQ Administration service will continue to use more than 90% of the CPU during the registry restoration activity.

To set this key, perform the following steps on each secondary Administration server :

1. Start the Registry Editor interface.
2. Expand HKEY_LOCAL_MACHINE\SOFTWARE\Mission Critical Software\OnePoint\Administration\Modules\ServerConfiguration\Refresh.
3. On the Edit menu, click New > DWORD Value.
4. Type MMSRegRestoreType.
   • If the value data for the MMSRegRestoreType value is 0, then the secondary Administration server uses the old registry restoration method.
   • If the value data for the MMSRegRestoreType value is 1, then the secondary Administration server uses the new registry restoration method.
5. To change the value data, select MMSRegRestoreType.
6. On the Edit menu, click Modify and type 0 or 1.
7. Restart the NetIQ Administration service
   

Microsoft Windows Server 2003 and Server 2003 SP1 have changed the way that registry merges are accomplished and take considerably longer to process updates to the registry than previous operating system versions.

Formerly known as NETIQKB72203