Active Directory replication errors event id

Показать описание

This one of the favorite questions, an interviewer can ask to those appearing for Active Directory Administrator.

Q. What are the different types of replication error and error codes?

In answer you can explain about the following scenarios:
8614 -The Active Directory cannot replicate with this server because the time since the last replication with this server has exceeded the tombstone lifetime

8606 - Insufficient attributes were given to create an object. This object may not exist because it may have been deleted and already garbage collected
1988 - The local domain controller has attempted to replicate the following object from the following source domain controller. This object is not present on the local domain controller because it may have been deleted and already garbage collected.
1908-Could not find the domain controller for this domain.
Note: - Normally this event generated as a result of KDC issue. It may also generate as a sub-event of 1926, 1925, 1943 and 1125.
1908 - Could not find the domain controller for this domain.
Reason: When the destination DC fails to bind to the source DC using RPC a win32 error code in the Repsfrom status for that partition - usually Schema or Configuration since these partitions are replicated at a higher priority. After an RPC bind failure has occurred, a cleanup routine will run to clear the destination DCs queue from that same source DC. This is done to avoid wasting time attempting to replicate with a DC that it can't connect to. Since it hasn't attempted a sync for the partitions that have been cleared from the queue, a status 1256 is logged. In a scenario where destination DC replicates Schema, Configuration, and several GC non-writable partitions from the source DC, the win32 error status for the Schema and Configuration partitions that caused the RPC bind failure is logged. The destination DC will then cancel the pending replication tasks for the remaining partitions and log win32 error 1256 for the status.
In summary: 1256 is logged as the replication status per partition as a result of the destination DC canceling the sync request from the source DC due to a connectivity failure previously encountered.
8453 - Replication access was denied
Reason:
For a period or scheduled replication, if the destination domain controller is a Read-Only Domain Controller (RODC):
The Enterprise Read-Only Domain Controllers security group does not have “Replicating Directory Changes” permissions on the root of the naming context (NC) for the partition that doesn't replicate and returns error 8453.

1308 - The Knowledge Consistency Checker (KCC) has detected that successive attempts to
Replicate with the following domain controller has consistently failed.
Or
The Knowledge Consistency Checker (KCC) has detected that successive attempts to replicate with the following directory service have consistently failed.

2108 and1084 - occur during inbound replication of Active Directory Domain Services.

Reason: These events occur when the domain controller cannot write a transactional change to the local copy of the Active Directory database.