A Windows Server 2008 domain controller that is configured with the Japanese language locale may not apply updates to attributes on an object during inbound replication

In certain Active Directory directory service replication scenarios, a destination domain controller that is running Windows Server 2008 does not receive some attributes that are stored on an object during inbound replication.

This problem occurs specifically on destination domain controllers that are running Windows Server 2008 and that have the Active Directory language locale set to Japanese. Additionally, this problem may occur when an object is created during inbound replication.

In this situation, no errors are reported by the Directory Service event log, by the domain controller diagnostic tool (Dcdiag.exe), by the Repadmin.exe tool, or by any other replication status tools or diagnostic tools on either the source domain controller or the destination domain controller.

Note Destination domain controllers that are running Windows 2000 Server and Windows Server 2003 are not affected by this problem.

This problem occurs because domain controllers that are running Windows Server 2008 and that have the Active Directory language locale set to Japanese use a phonetic display name feature.

In some common scenarios, replication packets arrive out of order at these domain controllers. In these scenarios, some attribute values on the objects that are being replicated are lost. This behavior occurs because of a problem in the Active Directory database.

Service pack information

To resolve this problem, install the latest service pack for Windows Server 2008. For more information, click the following article number to view the article in the Microsoft Knowledge Base: To resolve this problem, we suggest that you postpone the following operations until a preventive fix is installed on all Windows Server 2008-based servers in your environment:

• Installing Active Directory on new domain controllers that are running Windows Server 2008 and that will be configured to use the Japanese language locale
• Upgrading to Windows Server 2008 any existing Windows Server 2003-based domain controllers that have (or that will have) the Japanese language locale installed

Install the following preventive fix on all relevant Windows Server 2008-based computers before you install Active Directory on these computers. In this situation, you should install the preventive fix after a domain controller is upgraded to Windows Server 2008 but before the first inbound replication occurs.

We recommend that you install this preventive fix on all existing Windows Server 2008-based domain controllers in forests in which the Japanese language locale is either installed or will be installed.

Download information

The following files are available for download from the Microsoft Download Center:

Update for Windows Server 2008 (KB949189)

Download the Update for Windows Server 2008 (KB949189) package now.

Update for Windows Server 2008 x64 Edition (KB949189)

Download the Update for Windows Server 2008 x64 Edition (KB949189) package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

When you install this fix, a message that resembles the following message may be logged in the event log with Event ID 4374:

Windows Servicing identified that package KB949189(Hotfix) is not applicable for this computer.

This behavior is expected. You can safely ignore this message.

If you notice that some attributes are already missing, apply the preventive fix according to the instructions in this article, and then contact Microsoft Customer Service Support for additional troubleshooting.

If you can, do not remove Active Directory from any affected Windows Server 2008 domain controllers before you contact Microsoft Customer Service Support so that we can troubleshoot these domain controllers. Be advised that the missing attributes may be recoverable only if we can identify the source domain controller from which these attributes originated.