This commit is contained in:
Mike McFetridge
2026-07-20 09:23:17 -04:00
parent c1315882da
commit 72272e4006
3179 changed files with 562960 additions and 14 deletions
@@ -0,0 +1,22 @@
(8606) Insufficient attributes were given to create an object. This object may not exist because it may have been deleted and already garbage collected.
If AD replication gives these kind of errors here are some web sites to help troubleshoot.
[Troubleshoot replication error 8606 - Windows Server | Microsoft Learn](https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/replication-error-8606)
[Lingering Object Removal ServerGuruNow (wordpress.com)](https://servergurunow.wordpress.com/2017/07/23/lingering-object-removal/)
[Active Directory replication Event ID 1388 or 1988 - A lingering object is detected - Windows Server | Microsoft Learn](https://learn.microsoft.com/en-US/troubleshoot/windows-server/active-directory/active-directory-replication-event-id-1388-1988)
[Lingering objects still remain - Windows Server | Microsoft Learn](https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/lingering-objects-remain)
Example of command I ran in our AD environement
repadmin /removelingeringobjects ==tnwg01a-p0595.ad.cbp.dhs.gov== ==ea73d7c3-b70d-4c44-bb68-8359086ed67c== ==dc=ad,dc=cbp,dc=dhs,dc=gov==
The first part is the DNS name of the source domain controller, highlighted in green.
The second part is the source domain controller GUID, highlighted in yellow.
That you can get from the DC "netlogon.dns" file located on the DC at "c:\windows\system32\config"
![Exported image](Exported%20image%2020250808201948-0.png)
The third part is the domain name, highlighted in orange.