I can't seem to get the repadmin /removelingeringobjects syntax correctly. My best guess is:
repadmin /removelingeringobjects SVR04.MyDomain.local 8137fbab-e362-401b-9816-ffec4ac17a93 CN=Reset Password\0ACNF:0f510150-9d77-488b-a11e-07295ec5e494,CN=Roles,CN=RBAC,CN=MyDomain,CN=M
icrosoft Exchange,CN=Services,CN=Configuration,DC=MyDomain,DC=local /advisory_mode
I get the message Invalid arguments. I also tried a naming context of CN=Configuration,DC=MyDomain,DC=local (I tried a lot of things). I get Invalid naming context.
I have 2 DCs, SVR03 and SVR04. Both are 2012 R2. In SVR03's event log I see event ID 1988 with details:
Source domain controller:
93148ff4-d67e-4415-ae06-619a606cfb02._msdcs.MyDomain
Object:
CN=Reset Password\0ACNF:0f510150-9d77-488b-a11e-07295ec5e494,CN=Roles,CN=RBAC,CN=MyDomain,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=MyDomain,DC=local
Object GUID:
0f510150-9d77-488b-a11e-07295ec5e494
Running repadmin /showrepl SVR03 on SVR03 and verifying in DNS, I determined that SVR03's GUID is 8137fbab-e362-401b-9816-ffec4ac17a93. I ran showrepl SVR04 on SVR03 also. Below are the outputs.
Can anyone tell me how to enter this command correctly?
Thanks
repadmin /showrepl SVR03
Default-First-Site-Name\SVR03
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: 8137fbab-e362-401b-9816-ffec4ac17a93
DSA invocationID: b771a1cd-b04a-4a4d-8c27-2c656a13350e
==== INBOUND NEIGHBORS ======================================
DC=MyDomain,DC=local
Default-First-Site-Name\SVR04 via RPC
DSA object GUID: 93148ff4-d67e-4415-ae06-619a606cfb02
Last attempt @ 2017-03-22 16:23:48 was successful.
CN=Configuration,DC=MyDomain,DC=local
Default-First-Site-Name\SVR04 via RPC
DSA object GUID: 93148ff4-d67e-4415-ae06-619a606cfb02
Last attempt @ 2017-03-22 16:22:21 failed, result 8606 (0x219e):
Insufficient attributes were given to create an object. This object
may not exist because it may have been deleted and already garbage collected.
96 consecutive failure(s).
Last success @ 2016-06-27 09:25:59.
CN=Schema,CN=Configuration,DC=MyDomain,DC=local
Default-First-Site-Name\SVR04 via RPC
DSA object GUID: 93148ff4-d67e-4415-ae06-619a606cfb02
Last attempt @ 2017-03-22 15:47:52 was successful.
DC=DomainDnsZones,DC=MyDomain,DC=local
Default-First-Site-Name\SVR04 via RPC
DSA object GUID: 93148ff4-d67e-4415-ae06-619a606cfb02
Last attempt @ 2017-03-22 15:47:52 was successful.
DC=ForestDnsZones,DC=MyDomain,DC=local
Default-First-Site-Name\SVR04 via RPC
DSA object GUID: 93148ff4-d67e-4415-ae06-619a606cfb02
Last attempt @ 2017-03-22 15:47:52 was successful.
Source: Default-First-Site-Name\SVR04
******* 96 CONSECUTIVE FAILURES since 2016-06-27 09:25:59
Last error: 8606 (0x219e):
Insufficient attributes were given to create an object. This object
may not exist because it may have been deleted and already garbage collected.
repadmin /showrepl SVR04
Default-First-Site-Name\SVR04
DSA Options: IS_GC
Site Options: (none)
DSA object GUID: 93148ff4-d67e-4415-ae06-619a606cfb02
DSA invocationID: 0cee6104-1e9d-4daa-950b-ad3e8eff09b0
==== INBOUND NEIGHBORS ======================================
DC=MyDomain,DC=local
Default-First-Site-Name\SVR03 via RPC
DSA object GUID: 8137fbab-e362-401b-9816-ffec4ac17a93
Last attempt @ 2017-03-22 15:51:33 was successful.
CN=Configuration,DC=MyDomain,DC=local
Default-First-Site-Name\SVR03 via RPC
DSA object GUID: 8137fbab-e362-401b-9816-ffec4ac17a93
Last attempt @ 2017-03-22 15:51:33 was successful.
CN=Schema,CN=Configuration,DC=MyDomain,DC=local
Default-First-Site-Name\SVR03 via RPC
DSA object GUID: 8137fbab-e362-401b-9816-ffec4ac17a93
Last attempt @ 2017-03-22 15:51:33 was successful.
DC=DomainDnsZones,DC=MyDomain,DC=local
Default-First-Site-Name\SVR03 via RPC
DSA object GUID: 8137fbab-e362-401b-9816-ffec4ac17a93
Last attempt @ 2017-03-22 15:51:33 was successful.
DC=ForestDnsZones,DC=MyDomain,DC=local
Default-First-Site-Name\SVR03 via RPC
DSA object GUID: 8137fbab-e362-401b-9816-ffec4ac17a93
Last attempt @ 2017-03-22 15:51:33 was successful.
repadmin /removelingeringobjects SVR04.MyDomain.local 8137fbab-e362-401b-9816-ff
I tried each of the naming contexts until one worked shown in the /showrepl commands until I could manually replicate from the AD Sites and Services panel. Should specifying the naming context in the event message worked?