It has been too long since this machine last replicated with the named source machine.
The time between replications with this source has exceeded the tombstone lifetime.
Replication has been stopped with this source.
The reason that replication is not allowed to continue is that the two DCs may contain lingering
objects. Objects that have been deleted and garbage
collected from an Active Directory Domain Services partition but still exist in the writable partitions of other DCs in the same
domain, or read-only partitions of global catalog servers in other domains in the forest are known as
"lingering objects". If the local destination DC was allowed to replicate with the source DC, these potential
lingering object would be recreated in the local Active Directory Domain Services database.
Time of last successful replication:
%1
Invocation ID of source directory server:
%2
Name of source directory server:
%3
Tombstone lifetime (days):
%4
The replication operation has failed.
User Action:
The action plan to recover from this error can be found at http://support.microsoft.com/?id=314282.
If both the source and destination DCs are Windows Server 2003 DCs, then install the support tools included on the
installation CD. To see which objects would be deleted without actually performing the
deletion run "repadmin /removelingeringobjects /ADVISORY_MODE".
The event logs on the source DC will enumerate all lingering objects. To remove lingering objects
from a source domain controller run
"repadmin /removelingeringobjects ".
If either source or destination DC is a Windows 2000 Server DC, then more information on how to
remove lingering objects on the source DC can be found at http://support.microsoft.com/?id=314282 or from
your Microsoft support personnel.
If you need Active Directory Domain Services replication to function immediately at all costs and don't have
time to remove lingering objects, enable replication by setting the following
registry key to a non-zero value:
Registry Key:
HKLM\%6\%5
Replication errors between DCs sharing a common partition can prevent user and computer accounts,
trust relationships, their passwords, security groups,
security group memberships and other Active Directory Domain Services configuration data to vary between DCs,
affecting the ability to log on, find objects of interest and perform other critical operations.
These inconsistencies are resolved once replication errors are resolved. DCs that fail to inbound
replicate deleted objects within tombstone lifetime number of days will remain inconsistent until
lingering objects are manually removed by an administrator from each local DC. Additionally,
replication may continue to be blocked after this registry key is set, depending on whether
lingering objects are located immediately.
Alternate User Action:
Force demote or reinstall the DC(s) that were disconnected.