Windows Server: AD, DNS & Group Policy
Active Directory replication, trusts, DNS, SYSVOL and Group Policy processing.
55 articles
1789
Error 1789 trust relationship failed: rebuilding a broken secure channel
Error 1789 means the computer password no longer matches AD. Reset the secure channel with Test-ComputerSecureChannel instead of blindly rejoining.
8524
Error 8524 DNS lookup failure: replication cannot resolve the source DC
Error 8524 is a DNS lookup failure during replication. Check for a stale NTDS Settings object first, then the GUID…
1788
Error 1788 trusted domain failure: forest and external trusts that stop working
Error 1788 breaks authentication across a trust. Verify the trust, reset the secret if that fails, then check DNS between…
1722
Error 1722 RPC server unavailable between DCs: ports, firewalls and mappers
Error 1722 halts AD replication when RPC cannot reach the partner DC. Open the dynamic port range, fix the firewall…
Event ID 1058
Event ID 1058: Windows cannot access gpt.ini for a Group Policy object
Event ID 1058 means the client cannot read gpt.ini from SYSVOL. Check DFS referrals, share permissions and DNS, then re-run…
8614
Error 8614 tombstone lifetime exceeded: a DC that stayed offline far too long
Error 8614 quarantines a DC that has not replicated within the tombstone lifetime. Microsoft documents a graceful recovery; force demotion…
Event ID 1129
Event ID 1129: Group Policy runs before the network is ready at boot
Event ID 1129 means Group Policy ran before the network was up. Fix the adapter and switch timing, then extend…
8606
Error 8606 lingering objects: clearing stale AD data that blocks replication
Error 8606 shows lingering objects left by a long-disconnected DC. Purge them with repadmin removelingeringobjects and restore clean inbound replication.
Event ID 1006
Event ID 1006: Group Policy cannot authenticate to Active Directory
Event ID 1006 means the LDAP bind to a DC failed before policy could load. Repair the computer account, Kerberos…
8456
Errors 8456 and 8457: inbound or outbound replication switched off on a DC
Error 8456 or 8457 means replication was disabled on the source or destination DC. Re-enable it with repadmin options and…
Event ID 7016
Event ID 7016: a Group Policy client-side extension never finishes processing
Event ID 7016 names the client-side extension that failed. Compare it with Event ID 5016 timings to isolate the slow…
Event ID 2095
Event ID 2095 USN rollback: a domain controller restored from a snapshot
Event ID 2095 means a DC was rolled back outside AD and quarantined itself. Microsoft documents three recoveries, not just…