Active Directory Major Issues - Please Help

Hi,  

Please help I have inherited a domain and it is in a very sorry state.

DC1 - Site A, PDC, GC - IAS Server, File Server
DC2 - Site A, BDC - Exhcange Server
DC3 - Site B, BDC - File Server

Connection was made like this DC1 - DC2 - DC3.  

From what I can gather DC2 had a hardware issue and the drives were removed and put in another system.  This has been left with this since 2013.

I have run a dcdiag on DC1, DC2 and DC3

DC1

   Testing server: Default-First-Site-Name\DC1
      Starting test: Replications
         [Replications Check,DC1] A recent replication attempt failed:
            From DC2 to DC1
            Naming Context: CN=Configuration,DC=Domain,DC=local
            The replication generated an error (8614):
            The Active Directory cannot replicate with this server because the t
ime since the last replication with this server has exceeded the tombstone lifet
ime.
            The failure occurred at 2015-08-21 11:06:11.
            The last success occurred at 2013-12-13 17:11:12

[Replications Check,DC1] A recent replication attempt failed:
            From DC3 to DC1
            Naming Context: CN=Configuration,DC=Domain,DC=local
            The replication generated an error (8614):
            The Active Directory cannot replicate with this server because the t
ime since the last replication with this server has exceeded the tombstone lifet
ime.

DC2

[Replications Check,DC2] A recent replication attempt failed:
            From DC1 to DC2
            Naming Context: CN=Configuration,DC=domain,DC=local
            The replication generated an error (8606):
            Insufficient attributes were given to create an object.  This object
 may not exist because it may have been deleted and already garbage collected.
            The failure occurred at 2015-08-21 10:50:44.
            The last success occurred at 2015-06-22 13:42:27.
            1801 failures have occurred since the last success.
         [Replications Check,DC2] A recent replication attempt failed:
            From DC3 to DC2
            Naming Context: CN=Configuration,DC=domain,DC=local
            The replication generated an error (8606):
            Insufficient attributes were given to create an object.  This object
 may not exist because it may have been deleted and already garbage collected.
            The failure occurred at 2015-08-21 10:50:44.
            The last success occurred at 2015-08-18 13:50:10.
            25 failures have occurred since the last success


The PDC - DC1 is stating two of the other domain controllers are tombstoned I require to get active directory operating to enable to enable me to start to migrating over to 2012 Server.


Should I be believing that DC2 and DC3 are both Tombestoned and demote them and promote them again?


Any assistance with this would be most helpful.


Thanks


Martin

August 22nd, 2015 9:43am

Hi Martin,

You can remove lingering objects for the dc2 and DC3. 

Please check remove lingering objects  form tech net site. Use repadmin /removelingeringobjects command

https://technet.microsoft.com/en-us/library/cc949134(v=ws.10).aspx

https://technet.microsoft.com/en-us/library/cc785298(v=ws.10).aspx 

Please mark this as answer if this help you.

Thanks,

Arindam

Free Windows Admin Tool Kit Click here and download it now
August 22nd, 2015 10:47am

Yes, DC2 and DC3 are considered as tombstoned and that is why you have your replication failures. See that: https://technet.microsoft.com/en-us/library/replication-error-8614-the-active-directory-cannot-replicate-with-this-server-because-the-time-since-the-last-replication-with-this-server-has-exceeded-the-tombstone-lifetime%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

You can demote DC3 and promote it again with no problems. However, that would be problematic for DC2 as Exchange Server is running on it. I would recommend asking them here before demoting it: https://social.technet.microsoft.com/Forums/office/en-US/home?category=exchangeserver They will guide you to the best procedure to use before demoting it.

August 22nd, 2015 4:46pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics