How fix a Tombstone Domain Controller


Issue

Domain Controller is not replicating

Environment

Astro 25 system

System, Zone, or TSUB Domain Controller

Resolution

First, make sure you can log into each domain controller as motosec.
Second, make sure the domain controllers can ping each other.
Third get this from each DC.
 
Open admin level command prompt
Repadmin /showrepl > ucs-dc01_repl.txt  (replace ucs-dc01 with the actual name of the DC)
Repadmin /showrepl ucs-dc01.ucs:49281 > LDAP_repl.txt
netdom query fmso (This will give you the fmso role holder)

Remote desktop into the fmso role holder 
Go to services and disable the KDC service

 

Force replication between the ucs-dc01 and z001dc01 via the repadmin command:

repadmin /replicate Destination_DC_LIST Source_DC_NAME Naming_context [/force]

For example: repadmin /replicate z001dc01 ucs-dc01 DC=mot,DC=sz0000 /force
Parameters

Destination_DC_LIST

Specifies the host name of the destination domain controller (Directory Server Agent) with which you want to replicate. See above for detailed syntax on the DC_LIST parameter. This parameter cannot be used with /allsource.

Source_DC_NAME

Specifies the host name of the source domain controller with which you want to replicate. This parameter accepts a GUID, GUID-based DNS name, or the name of a server object.

Naming_context

Specifies the particular naming context (or subset of the Active Directory tables) for the command. The

repadmin /showrepl context will show the currently known naming contexts and their individual replication status. Each naming context must be addressed with a separate command.

/force is parameter is used to override the Disable Replication option on a server.

 

Below are examples of the repadmin /replicate commands. You will have to do this on each domain controller for each partition that is failing.
repadmin /replicate z001dc01.zone1 ucs-dc01.ucs DC=mot,DC=sz0000 /force
repadmin /replicate z001dc01.zone1 ucs-dc01.ucs CN=Configuration,DC=mot,DC=sz0000 /force
repadmin /replicate z001dc01.zone1 ucs-dc01.ucs CN=Schema,CN=Configuration,DC=mot,DC=sz0000 /force
repadmin /replicate z001dc01.zone1 ucs-dc01.ucs DC=DomainDnsZones,DC=mot,DC=sz0000 /force
repadmin /replicate z001dc01.zone1 ucs-dc01.ucs DC=ForestDnsZones,DC=mot,DC=sz0000 /force
repadmin /replicate z001dc01.zone1 ucs-dc01.ucs DC=ucs,DC=mot,DC=sz0000 /force
repadmin /replicate z001dc01.zone1 ucs-dc01.ucs DC=zone1,DC=mot,DC=sz0000 /force
repadmin /replicate z001dc01.zone1:49281 ucs-dc01.ucs:49281 O=sysData,C=astro /force
repadmin /replicate z001dc01.zone1:49281 ucs-dc01.ucs:49281 CN=Configuration,CN={GUID from LDAP_repl.txt}
repadmin /replicate z001dc01.zone1:49281 ucs-dc01.ucs:49281 CN=Schema, CN=Configuration, CN={GUID from LDAP_repl.txt}

repadmin /showrepl
 
If showrepl show the connections as successful proceed. Continue to the next Domain Controller