AD replication err kcc and rpc

Scott Gao 291

Hello

Limit by my knowledge, I can not fix after read microsoft document.
Would you mind guide me fix it?
Thanks for your time and help.

Best Regards.
Scott

189415-dc04-1.txt

191474-dc05-1.txt

Clément BETACORNE 2,031 Reputation points

2022-04-04T09:05:58.55+00:00

Hello,

The second file is not readible, is dc05 the only domain controller you have in this site ? Is dc05 also running other server roles like DHCP, IIS, etc... ?

Regards,
Scott Gao 291 Reputation points

2022-04-09T01:49:54.733+00:00

Hello

I had change to English, would you please help to check?
Thank you.

2 answers

Anonymous

2022-04-09T01:53:00.237+00:00

The last dcdiag snippet indicates that one is tombstoned. The only recourse here is to do cleanup to remove remnants
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-metadata-cleanup
https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-manually-removing-a-domain-controller-server/ba-p/280564

and rebuild it from scratch.

--please don't forget to upvote and Accept as answer if the reply is helpful--
Please sign in to rate this answer.
Anonymous

2022-04-09T12:25:48.853+00:00

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--

Scott Gao 291 Reputation points

2022-04-10T02:43:00.237+00:00

Dear DSPatrick

Very appreciate for your help. Do you mean it tombstoned then DC can not back to normal even fix replicate? or do you mean this replicate error not possible to fix?
As I know windows 2012 or 2016, it will auto pure metadata if I delete DC computer account. I just need to transfer FSMO role to confirm each role had been taken.
purge metadata is not difficult for me. That's not important. After that, I should prompt new dc if needed?

I am very weak at dc replicate (FRS) and site design. would you mind provide some link to help me understand?
Yesterday I create a new GP, but I fail to gpupdate becuase of GP not replicate to my current logon server. This logon server is in remote site which is another province. This is not a good idea.
How can I force login to the local site DC? I will be back to the office at tomorrow and will continue after that time.
Thank you.

Scott Gao 291 Reputation points

2022-04-10T03:02:49.233+00:00

Hello Patrtick

how Can I know I am running at FRS or DFS? I checked not found DFS function at DC, does it mean running FRS?
Thank you.
Sign in to comment
Anonymous

2022-04-10T13:25:11.72+00:00

Do you mean it tombstoned then DC can not back to normal even fix replicate?

Yes, that's correct, if tombstoned then it needs rebuilt from scratch.

Another place to look, if you find 48 then using DFSR, if null or 0, 16, 32 then FRS or some state of migration from FRS

--please don't forget to upvote and Accept as answer if the reply is helpful--
Please sign in to rate this answer.
Anonymous

2022-04-15T12:16:35.317+00:00

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--
Sign in to comment

Share via

AD replication err kcc and rpc

2 answers