(8606) Insufficient attributes were given to create an object. This object may not exist because it may have been deleted and already garbage collected.
 
If AD replication gives these kind of errors here are some web sites to help troubleshoot.
 
[Troubleshoot replication error 8606 - Windows Server | Microsoft Learn](https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/replication-error-8606)
 
[Lingering Object Removal – ServerGuruNow (wordpress.com)](https://servergurunow.wordpress.com/2017/07/23/lingering-object-removal/)
 
[Active Directory replication Event ID 1388 or 1988 - A lingering object is detected - Windows Server | Microsoft Learn](https://learn.microsoft.com/en-US/troubleshoot/windows-server/active-directory/active-directory-replication-event-id-1388-1988)
 
[Lingering objects still remain - Windows Server | Microsoft Learn](https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/lingering-objects-remain)
 
Example of command I ran in our AD environement  
￼repadmin /removelingeringobjects ==tnwg01a-p0595.ad.cbp.dhs.gov== ==ea73d7c3-b70d-4c44-bb68-8359086ed67c== ==dc=ad,dc=cbp,dc=dhs,dc=gov==
 
The first part is the DNS name of the source domain controller, highlighted in green.  
The second part is the source domain controller GUID, highlighted in yellow.  
That you can get from the DC "netlogon.dns" file located on the DC at "c:\windows\system32\config"

![Exported image](Exported%20image%2020250808202023-0.png)  

The third part is the domain name, highlighted in orange.