I have taken responsibility of some AD controllers, and have discovered a problem. All DC's involved are windows 2003 one of my child domains (single domain controller) is not able to replicate to the forest domain controllers (they replicate nicely between themselves). I get the following errors. Event Type: Error Event Source: NTDS Replication Event Category: Replication Event ID: 2042 Date: 29.04.2010 Time: 11:38:09 User: NT AUTHORITY\ANONYMOUS LOGON Computer: site2DC Description: It has been too long since this machine last replicated with the named source machine. The time between replications with this source has exceeded the tombstone lifetime. Replication has been stopped with this source. The reason that replication is not allowed to continue is that the two machine's views of deleted objects may now be different. The source machine may still have copies of objects that have been deleted (and garbage collected) on this machine. If they were allowed to replicate, the source machine might return objects which have already been deleted. Time of last successful replication: 2008-06-03 08:48:26 Invocation ID of source: 04eef820-f810-04ee-0100-000000000000 Name of source: b5109352-8e4a-4a08-aa4b-2a787fff75fb._msdcs.mydomain.com Tombstone lifetime (days): 60 The replication operation has failed. From what I understand the GUID: 04eef820-f810-04ee-0100-000000000000 should point to a domaincontroller, (the one experiencing the problem?), but this GUID is not in DNS. Is there a place I can see what this is used to? maybe this might give me some more hints to where the issue lies? (ex which domain or connector it is used in) I have tried repladmin /removelingeringobjects, both for the main domain and the child domain. And found in total 1 lingering object which has been removed. repladmin /showrepl from the DC in question shows following output (cut away some succeful subdomains and anonymized it a little) ------------------------------------------------------------------- repadmin running command /showrepl against server localhost Site2\Site2DC DC Options: IS_GC Site Options: (none) DC object GUID: 1ddde435-8406-4e52-8765-cc9c3f9a0610 DC invocationID: 54dc9a9c-82da-47b7-a201-ab9483f21d0e ==== INBOUND NEIGHBORS ====================================== CN=Configuration,DC=mydomain,DC=com myMainSite\MySiteDC03 via RPC DC object GUID: b5109352-8e4a-4a08-aa4b-2a787fff75fb Address: b5109352-8e4a-4a08-aa4b-2a787fff75fb._msdcs.mydomain.com DC invocationID: d64c41e7-44d1-4ebe-aa4b-78fa6cd79667 DO_SCHEDULED_SYNCS WRITEABLE COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS USNs: 41267643/OU, 41267643/PU Last attempt @ 2010-04-29 10:58:16 was successful. CN=Schema,CN=Configuration,DC=mydomain,DC=com myMainSite\MySiteDC03 via RPC DC object GUID: b5109352-8e4a-4a08-aa4b-2a787fff75fb Address: b5109352-8e4a-4a08-aa4b-2a787fff75fb._msdcs.mydomain.com DC invocationID: d64c41e7-44d1-4ebe-aa4b-78fa6cd79667 DO_SCHEDULED_SYNCS WRITEABLE COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS USNs: 41263781/OU, 41263781/PU Last attempt @ 2010-04-29 10:58:16 was successful. DC=mydomain,DC=com myMainSite\MySiteDC03 via RPC DC object GUID: b5109352-8e4a-4a08-aa4b-2a787fff75fb Address: b5109352-8e4a-4a08-aa4b-2a787fff75fb._msdcs.mydomain.com DC invocationID: d64c41e7-44d1-4ebe-aa4b-78fa6cd79667 DO_SCHEDULED_SYNCS COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS USNs: 41267574/OU, 41267574/PU Last attempt @ 2010-04-29 10:58:18 was successful. DC=SUB1,DC=mydomain,DC=com myMainSite\MySiteDC03 via RPC DC object GUID: b5109352-8e4a-4a08-aa4b-2a787fff75fb Address: b5109352-8e4a-4a08-aa4b-2a787fff75fb._msdcs.mydomain.com DC invocationID: d64c41e7-44d1-4ebe-aa4b-78fa6cd79667 DO_SCHEDULED_SYNCS COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS USNs: 41263781/OU, 41263781/PU Last attempt @ 2010-04-29 10:58:16 was successful. DC=SUB2,DC=mydomain,DC=com myMainSite\MySiteDC03 via RPC DC object GUID: b5109352-8e4a-4a08-aa4b-2a787fff75fb Address: b5109352-8e4a-4a08-aa4b-2a787fff75fb._msdcs.mydomain.com DC invocationID: d64c41e7-44d1-4ebe-aa4b-78fa6cd79667 DO_SCHEDULED_SYNCS COMPRESS_CHANGES NO_CHANGE_NOTIFICATIONS USNs: 41263781/OU, 41263781/PU Last attempt @ 2010-04-29 10:58:16 was successful. ==== KCC CONNECTION OBJECTS ============================================ Connection -- Connection name : 46e4fd84-e90a-4961-b47a-d0cfd3b57662 Server DNS name : Site2DC.Site2.mydomain.com Server DN name : CN=NTDS Settings,CN=Site2DC,CN=Servers,CN=Site2,CN=Sites,CN=Configuration,DC=mydomain,DC=com Source: myMainSite\MySiteDC03 ******* 1 CONSECUTIVE FAILURES since 2010-04-29 11:10:12 Last error: 8614 (0x21a6): Can't retrieve message string 8614 (0x21a6), error 1815. TransportType: IP options: isGenerated overrideNotifyDefault ReplicatesNC: DC=SUB1,DC=mydomain,DC=com Reason: GCTopology IntersiteTopology Replica link has been added. ReplicatesNC: DC=SUB2,DC=mydomain,DC=com Reason: GCTopology IntersiteTopology Replica link has been added. ReplicatesNC: DC=SUB3,DC=mydomain,DC=com Reason: GCTopology IntersiteTopology Replica link has been added. ReplicatesNC: DC=mydomain,DC=com Reason: GCTopology IntersiteTopology Replica link has been added. ReplicatesNC: DC=ForestDnsZones,DC=mydomain,DC=com Reason: GCTopology IntersiteTopology ******* WARNING: KCC could not add this REPLICA LINK due to error. ReplicatesNC: DC=SUB15,DC=mydomain,DC=com Reason: GCTopology IntersiteTopology Replica link has been added. ReplicatesNC: DC=SUB16,DC=mydomain,DC=com Reason: GCTopology IntersiteTopology Replica link has been added. ReplicatesNC: CN=Configuration,DC=mydomain,DC=com Reason: GCTopology IntersiteTopology Replica link has been added. enabledConnection: whenChanged: 20100414023614.0Z whenCreated: 20080728161845.0Z Schedule: day: 0123456789ab0123456789ab Sun: 100100100100100100100100 Mon: 100100100100100100100100 Tue: 100100100100100100100100 Wed: 100100100100100100100100 Thu: 100100100100100100100100 Fri: 100100100100100100100100 Sat: 100100100100100100100100 1 connections found. ------------------------------ dcdiag from my main site shows no issues regarding this domaincontroller. Any help appreciated.

Hello, you can start here: http://technet.microsoft.com/en-us/library/cc738018(WS.10).aspxBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.

Hi, Thank you for the link. I have already run the lingering objects and deleted one object. But this GUID the event is referring to I cannot find: GUID: 04eef820-f810-04ee-0100-000000000000 I suspect it might be a subdomain that no longer exists that has not been replicated. is there a way to verify this?

Hello, sorry for the late answer, check with: http://support.microsoft.com/kb/230306 http://support.microsoft.com/kb/555846/en-usBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.

Thank you. I will look into this over the weekend.