I have a 2008 R2 Standard server and a 2003 Standard - both DC's and one is in tombstone state. There was also a previous 2003 DC that I thought was the culprit-- but it was not. It has been forcefully removed and it's info deleted from AD so that ship has sailed...
The 2008 server has all of the FSMO roles and it reports as such. The 2003 server reports ERROR when listing the FSMO Role Holder.
I am getting errors on both regarding NETLOGON, AD Replication, and Kerberos. DNS is out of sync but should be accurate as the IPs of both have not changed.
When I try to force replication through AD Sites & Services I get the following:
On 2003 Box:
Source 2003 to 2008: ..the target principal name is incorrect
Source 2008 to 2003: ..the target principal name is incorrect
On 2008 Box:
Source 2003 to 2008: ...cannot replicate...server has exceeded tombstone lifetime
Source 2008 to 2003: ...the target principal name is incorrect
I am having a hard time figuring out which one of the remaining servers needs to be depromoted and rejoined. Does that mean the 2008 server is the one that needs to be rejoined?
Also, if that is the case how do I determine that the 2003 server's copy of AD is consistent and valid?
I have been all over Microsoft's articles which show how to fix the issue, I just want to make sure I am doing it correctly.