hi all,
I have two domain controllers in the same site
one is the primary domain controller named DC
the other domain controller named ADC is an additional one
both domain controllers experience a power outage
but "adc" the additional domain controller faced a time jump to past date to 2002 then the time service begins to sync with the primary domain controller and the time is right now
but there is a problem in replication
I think that "ADC" the additional domain controller can replicate from "DC" the one holding the FSMO roles
ADC is the downstream server and dc is the upstream server
but "DC" can not replicate from "ADC"
"DC" is the downstream server and "Adc" is the upstream server
so i'm looking for a solution in https://support.microsoft.com/en-us/help/2020053/troubleshooting-ad-replication-error-8614-the-active-directory-cannot
if anyone could give me an advice regarding that issue
the output of readminis shown below
the output of repadmin /showrepl DC
Default-First-Site-Name\DC
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: f19df3de-60d9-45d8-9e1e-81351a3588fd
DSA invocationID: 210351f6-62a2-4cb5-8651-828f3dc53f85
==== INBOUND NEIGHBORS ======================================
DC=mydomaindc,DC=local
Default-First-Site-Name\ADC via RPC
DSA object GUID: 89650a74-a868-4d7d-8eff-4da4d16627a1
Last attempt @ 2018-09-08 08:21:31 failed, result 8614 (0x21a6):
The directory service cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
3865 consecutive failure(s).
Last success @ 2018-09-07 11:25:03.
CN=Configuration,DC=mydomaindc,DC=local
Default-First-Site-Name\ADC via RPC
DSA object GUID: 89650a74-a868-4d7d-8eff-4da4d16627a1
Last attempt @ 2018-09-08 07:55:55 failed, result 8614 (0x21a6):
The directory service cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
30 consecutive failure(s).
Last success @ 2018-09-07 11:25:03.
CN=Schema,CN=Configuration,DC=mydomaindc,DC=local
Default-First-Site-Name\ADC via RPC
DSA object GUID: 89650a74-a868-4d7d-8eff-4da4d16627a1
Last attempt @ 2018-09-08 07:55:55 failed, result 8614 (0x21a6):
The directory service cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
23 consecutive failure(s).
Last success @ 2018-09-07 11:25:03.
DC=DomainDnsZones,DC=mydomaindc,DC=local
Default-First-Site-Name\ADC via RPC
DSA object GUID: 89650a74-a868-4d7d-8eff-4da4d16627a1
Last attempt @ 2018-09-08 08:21:26 failed, result 8614 (0x21a6):
The directory service cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
89 consecutive failure(s).
Last success @ 2018-09-07 11:25:03.
DC=ForestDnsZones,DC=mydomaindc,DC=local
Default-First-Site-Name\ADC via RPC
DSA object GUID: 89650a74-a868-4d7d-8eff-4da4d16627a1
Last attempt @ 2018-09-08 08:06:26 failed, result 8614 (0x21a6):
The directory service cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
83 consecutive failure(s).
Last success @ 2018-09-07 11:25:03.
Source: Default-First-Site-Name\ADC
******* 3848 CONSECUTIVE FAILURES since 2018-09-07 11:25:03
Last error: 8614 (0x21a6):
The directory service cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime.
the output of repadmin showrepl/ ADC
Default-First-Site-Name\ADC
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: 89650a74-a868-4d7d-8eff-4da4d16627a1
DSA invocationID: 7f1fe5f5-91d9-4a83-b527-3490d45547dd
==== INBOUND NEIGHBORS ======================================
DC=mydomaindc,DC=local
Default-First-Site-Name\DC via RPC
DSA object GUID: f19df3de-60d9-45d8-9e1e-81351a3588fd
Last attempt @ 2018-09-08 08:21:33 was successful.
CN=Configuration,DC=mydomaindc,DC=local
Default-First-Site-Name\DC via RPC
DSA object GUID: f19df3de-60d9-45d8-9e1e-81351a3588fd
Last attempt @ 2018-09-08 07:50:12 was successful.
CN=Schema,CN=Configuration,DC=mydomaindc,DC=local
Default-First-Site-Name\DC via RPC
DSA object GUID: f19df3de-60d9-45d8-9e1e-81351a3588fd
Last attempt @ 2018-09-08 07:50:12 was successful.
DC=DomainDnsZones,DC=mydomaindc,DC=local
Default-First-Site-Name\DC via RPC
DSA object GUID: f19df3de-60d9-45d8-9e1e-81351a3588fd
Last attempt @ 2018-09-08 07:58:04 was successful.
DC=ForestDnsZones,DC=mydomaindc,DC=local
Default-First-Site-Name\DC via RPC
DSA object GUID: f19df3de-60d9-45d8-9e1e-81351a3588fd
Last attempt @ 2018-09-08 07:50:12 was successful.