I have a domain my.domain.com in forest domain.com, that had a bad incident. The PDCE died, and so the role went to another DC, one that was behind a firewall from one of my remote DCs (remote.my.domain.com).
It took a while before it was discovered and the problem escalated to me.
The PDCE role was late moved to another DC that is not firewalled, but the remote DC didn't get the message and is somewhat broke. For instance, Forest Enterprise Admin credentials womn't work to log into it, and it has various errors in DCdiag.
What can I do to fix my remote domain controller so it syncs up with the new PDC?
just david