A domain controller that exceeds the forest’s tombstone lifetime is quarantined from replication; this does not by itself prove that its database is corrupted. Do not simply reconnect it or run repadmin /syncall: first determine whether to remove and replace the DC or clean lingering objects and restore replication, based on the forest’s health and whether the DC contains changes that must be preserved.
The steps below outline Microsoft’s lingering-object cleanup approach. Because mistakes can affect directory data, use a healthy, writable source DC and confirm the affected naming partition before removing anything. If you cannot establish an authoritative source or the DC’s data must be recovered, stop and involve an Active Directory specialist.
1. Confirm the replication condition
Check the Directory Service log on the affected DC and its partners for Event ID 2042 or 8614. Events 1388 and 1988 indicate lingering-object replication problems. Use Repadmin and Dcdiag to examine replication health; for example, run:
repadmin /showrepl <DCName>
The tombstone lifetime is stored in the tombstoneLifetime attribute on the Directory Service object in the Configuration naming context. Do not assume it is 180 days: documented defaults include 60 or 180 days, depending on the forest’s history. Read the forest’s actual value with Repadmin, substituting its forest-root distinguished name:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- 40 Gbps 2000 Mhz High Speed: The Cat 8 ethernet cable support max. 40 Gbps data transfer and 2000 MHz Brandwith, ideal for gaming and streaming, greatly improving upload and download speed, sound, image and resolution quality
- Excellent Anti-interference: The ethernet cable comes with 4 shielded foiled twisted pairs (F/FTP), pure copper core and gold-plated RJ45 connector, reducing interference, noise and crosstalk, making network speed faster and more stable
- Marvelous Durability: Internet cable wrapped with quality cotton braided cord, which makes the LAN cable stronger and more durable. The test proves that this internet cable can be bent at least 10000 times without broken, very suitable for long-term use
- PoE Supported: All lengths of ethernet cord can support the PoE power supply function except 65ft. You don't need additional power supply when installing a PoE camera, which is very convenient and safe
- Wide Compatibility: With the RJ45 Connector, network cable can be perfectly compatible with computers, laptops, modems, routers, PS5, X-Box and other networking devices. It can also be fully backward compatible with Cat7, Cat6e, Cat6, Cat5e, Cat5
repadmin /showattr “CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,DC=forest-root-domain,DC=TLD” /atts:tombstonelifetime
Microsoft’s supported options for an outdated DC are to remove and replace it, or to remove lingering objects and restore replication. A DC offline beyond the tombstone lifetime may not have learned about deletions whose tombstones have since been garbage-collected. Reconnecting it without remediation risks reintroducing lingering objects.
2. Choose a safe remediation path
If a healthy writable DC has a current copy of the affected partition and the outdated DC’s changes do not need preservation, removing and replacing the DC may be the appropriate choice. If you intend to recover replication, identify an authoritative healthy writable DC for each affected naming partition and scan for lingering objects before removing them. Do not force-demote or delete metadata automatically as a universal fix; select a path based on the forest’s state and your recovery requirements.
Rank #2
- Cat 6 performance at a Cat5e price but with higher bandwidth
- High Performance Cat6, 30 AWG, RJ45 Ethernet Patch Cable provides universal connectivity for LAN network components such as PCs,computer servers,printers,routers,switch boxes,network media players,NAS,VoIP phones
- Jadaol cat6 standard cable support Cat8 and Cat7 network and provides performance of up to 250 MHz 10Gbps and is suitable for 10BASE-T, 100BASE-TX (Fast Ethernet), 1000BASE-T/1000BASE-TX (Gigabit Ethernet) and 10GBASE-T (10-Gigabit Ethernet)
- UTP(Unshielded Twisted Pair) patch cable with RJ45 gold-plated Connectors and are made of 100% bare copper wire, ensure minimal noise and interference
- The unique flat cable shape allows for a cleaner and safer installation. You can easily and seamlessly make the cable run along walls, follow edges & corners or even make it completely invisible by sliding it under a carpet.
Microsoft identifies Lingering Object Liquidator v2 (LoLv2) as its preferred method for detecting and removing lingering objects. The Repadmin procedure below is a documented fallback. Run commands from an elevated Command Prompt, using an account with at least Domain Admins privileges in the affected domain; Configuration or Schema partition cleanup requires Enterprise Admins privileges.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problems3. Identify an authoritative source and the affected partition
- On a healthy, writable DC with an up-to-date replica of the affected partition, run repadmin /showreps <AuthoritativeDCName>. Record the applicable DSA object GUID for that source DC.
- Determine the naming context reported by the replication event. Common examples are DC=contoso,DC=com, CN=Configuration,DC=contoso,DC=com, and CN=Schema,CN=Configuration,DC=contoso,DC=com. Use the exact affected partition; a different naming context will not clean the one that generated the error.
- Confirm that the destination DC can connect directly to the source DC over LDAP port 389. If it cannot, fix connectivity before continuing.
4. Scan for lingering objects before removing them
Replace the placeholders with the destination DC, the authoritative source DC’s GUID, and the affected naming context. Run this first in advisory mode, which detects and reports objects without removing them:
repadmin /removelingeringobjects <Dest_DSA_LIST> <Source_DSA_GUID> <NC> /advisory_mode
For example, with sample values:
repadmin /removelingeringobjects dc1.contoso.com 4a8717eb-8e58-456c-995a-c92e4add7e8e dc=contoso,dc=com /advisory_mode
Rank #3
- High-Performance Connectivity: This Cat 6 ethernet cable is designed for superior performance, with a 24 AWG copper wire core. It provides universal connectivity as an ethernet cord for LAN network components such as PCs, servers, printers, routers, and more, ensuring reliable and fast network connections
- Advanced Cat6 Technology: Experience Cat6 performance with higher bandwidth at a Cat5e price. This network cable is future-proof, ready for 10-Gigabit Ethernet and backwards compatible with any existing Cat 5 cable network. It meets or exceeds Category 6 performance according to the TIA/EIA 568-C.2 standard
- Reliable Wired Network Solution: Known variously as a Cat6 network cable, ethernet cable Cat 6, or Cat 6 data/LAN cable, this RJ45 cable offers a more secure and reliable connection than wireless networks. It's ideal for internet connections that demand consistency and security
- Durable and Secure Design: The connectors of this ethernet cable feature gold-plated contacts and strain-relief boots for enhanced durability. Bare copper conductors not only improve cable performance but also comply with communication cable specifications
- High-Speed Data Transfer: With up to 550 MHz bandwidth, this ethernet cord is ideal for server applications, cloud computing, video surveillance, and streaming high-definition video. It also supports Power over Ethernet (PoE, PoE+, PoE++) for powering devices like IP cameras, VoIP phones, and wireless access points, ensuring fast and reliable network performance.
Review the results carefully and verify that the selected source DC is authoritative and has the current copy of that partition. If you are uncertain about the source, partition, or findings, do not proceed with deletion.
5. Remove confirmed lingering objects
After reviewing the advisory results and confirming the authoritative source, run the same command without /advisory_mode to remove lingering objects:
repadmin /removelingeringobjects <Dest_DSA_LIST> <Source_DSA_GUID> <NC>
Repeat the scan and cleanup for each affected DC and naming partition. This command does not resolve every stale-object condition: it does not remove abandoned objects, and USN gaps or up-to-dateness-vector issues may require separate investigation. If objects remain or replication errors persist, follow Microsoft’s guidance for the specific error rather than repeatedly running cleanup commands.
Rank #4
- Cat-6 UTP (Unshield Twisted Pair) ethernet cables for connecting networked devices such as computers, printers, routers, and more
- RJ45 connectors ensure universal connectivity; 250 MHz bandwidth
- Low signal loss with a transmission speed up to 10 gigabit per second
- Snagless plug design helps prevent damage when plugging/unplugging cable
- Gold-plated contacts and bare copper conductors improve signal integrity and resist corrosion
6. Restore and verify replication
Once the lingering-object condition is resolved, check inbound replication with repadmin /showrepl (or specify a DC with repadmin /showrepl <DCName>). You can use Replicate Now in Active Directory Sites and Services or a suitable Repadmin replication command to test replication after the quarantine condition is addressed. A successful command alone is not proof that every partition and partner is healthy.
Review the Directory Service log and run Dcdiag and Repadmin checks on the affected DC and its partners. Confirm successful replication for the relevant naming contexts and investigate any remaining errors. If cleanup did not resolve replication, check for abandoned objects, USN gaps, or an originating DC missing from the source DC’s up-to-dateness vector.
7. Enable strict replication consistency
Strict replication consistency helps prevent a destination DC from reanimating lingering objects after the corresponding deletion has been garbage-collected. It does not remove objects already present, so it is not a substitute for cleanup. To enable it on one DC, run:
Free tools Windows power users keep installed
One-click scans. No signup required.
Best Value
- Designed for Outdoor & Direct Burial Installations – Heavy-duty double-shielded Cat8 Ethernet cable minimizes EMI/RFI interference and delivers stable long-distance performance. Waterproof, anti-corrosion PVC jacket allows safe direct burial and reliable use in outdoor or indoor environments.
- 26AWG for Stable High-Load Networks – Thicker 26AWG conductors provide faster, more stable data transmission than standard 32AWG cables. Ideal for high-performance home networks, gaming setups, smart homes, and data-intensive applications.
- F/FTP Shielding & Hyper-Speed Performance: Cat8 Ethernet cable constructed with 4 shielded foiled twisted pairs and 26AWG OFC conductors; supports bandwidth up to 2000 MHz and data transmission speeds up to 40 Gbps, effectively reducing signal interference and ensuring stable connections. Ideal for low-latency gaming, 4K/8K streaming, and high-speed internet connections.
- RJ45 Connectors & Wide Compatibility: Cat8 Ethernet cable with two shielded RJ45 connectors; compatible with networking switches, IP cameras, routers, Nintendo Switch, modems, PS3, PS4, Xbox, patch panels, servers, smart TVs, and more; works with Cat7, Cat6, Cat5e, and Cat5 devices
- Weatherproof & UV Resistant: Outdoor-rated Cat8 Ethernet cable with UV-resistant PVC jacket; withstands direct sunlight, extreme cold, humidity, and hot weather; anti-aging and durable; Includes 18-month support.
repadmin /regkey <FullyQualifiedComputerName> +strict
To enable it across all DCs in the forest, use repadmin /regkey * +strict; for all global catalog servers, use repadmin /regkey gc: +strict. Apply configuration changes in accordance with your organization’s change controls.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.FAQ
Does Event ID 2042 mean the domain controller is permanently unusable?
No. It means replication is quarantined because the time since last replication exceeded the tombstone lifetime. Microsoft documents removing and replacing the DC or cleaning lingering objects and restoring replication; the right choice depends on the forest’s state and whether the DC’s changes must be preserved.
Is the tombstone lifetime always 180 days?
No. Documented defaults include 60 or 180 days, depending on the Active Directory environment’s history. Read the forest’s actual tombstoneLifetime value rather than assuming a default.
Can I fix a tombstoned DC with repadmin /syncall?
No. repadmin /syncall is not the documented cure for Event 2042 or 8614. First resolve the quarantine and lingering-object condition using an appropriate removal or cleanup path, then validate replication.
Recommended Free Tools
Does repadmin /removelingeringobjects fix every replication problem?
No. It addresses lingering objects in the selected naming context, but not abandoned objects, USN gaps, or every up-to-dateness-vector problem. Persistent errors need diagnosis based on the specific event and partition.
What does advisory mode do?
The /advisory_mode switch detects and reports lingering objects without removing them. Review the output and verify the authoritative source before running the command again without that switch to remove confirmed objects.
Quick Recap
Sources
- Microsoft: Active Directory replication Event ID 2042
- Microsoft: Replication error 8614
- Microsoft: Events 1388 and 1988
- Microsoft: Lingering objects
- Microsoft: Replication error 8606
- Microsoft: Manually remove lingering objects
- Microsoft: Abandoned objects blocking replication
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
![Your Computer’s Trusted Platform Module Has Malfunctioned Windows 11 Error [Fixed]](https://www.itechguides.com/wp-content/uploads/2023/08/your-computers-trusted-platform-module-has-malfunctioned-768x512.jpg)
![Attribute Editor Tab Missing in ADUC [Fixed]](https://www.itechguides.com/wp-content/uploads/2024/03/Attribute-Editor-Tab-Missing-in-ADUC-Fixed-featured-image-768x512.jpg)
Hey ,I see the website http://www.itechguides.com and it’s impressive.I wonder if the content or banners advertising options are available on your site ?What will be the price if we would like to put an article on your site?Note : Article must not be any text like sponsored or advertise or like thatCheers kevin del