Professional Documents
Culture Documents
This article provides a resolution for troubleshooting AD Replication error 1908: Could not
find the domain controller for this domain.
Applies to: Windows Server 2019, Windows Server 2016, Windows Server 2012 R2
Original KB number: 2712026
7 Note
Home users: This article is only intended for technical support agents and IT professionals.
If you're looking for help with a problem, please ask the Microsoft Community .
Symptoms
1. REPADMIN.exe reports that replication attempt has failed with status 1908.
REPADMIN commands that commonly cite the 1908 status include but are not limited
to:
REPADMIN /ADD
REPADMIN /REPLSUM *
REPADMIN /REHOST
REPADMIN /SHOWREPL
Console
Console
DC=ForestDnsZones,DC=Contoso,DC=com
HQ\Contoso-DC02 via RPC
DC object GUID:1b136427-14f0-448a-965c-9cbb61400fcd._msdcs.Contoso.com/
Last attempt @ <DATE> <TIME> failed, result 1908 (0x774):
Could not find the domain controller for this domain.
<# consecutive failure>
<Last Success>
2. NTDS KCC, NTDS Replication events with the 1908 status are logged in the directory
service event log.
Active Directory events that commonly cite the 1908 status include but are not limited
to:
NTDS KCC Knowledge 1926 Warning The attempt to establish a replication link
Consistency to a read-only directory partition with the
Checker following parameters failed.
NTDS KCC Knowledge 1925 Warning The attempt to establish a replication link
Consistency for the following writable directory
Checker partition failed.
NTDS Replication 1943 Error Active Directory was unable to remove all
Replication of the lingering objects on the local domain
controller. However, some lingering objects
might have been deleted on this domain
controller before this operation stopped. All
objects had their existence verified on the
following source domain controller.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/ad-replication-error-1908-not-find-domain-controller 2/6
12/6/22, 7:35 AM AD Replication error 1908 - Windows Server | Microsoft Learn
Additional Data
Error Value:
Could not find the domain controller for this domain. 1908
3. When trying to force replication in Active Directory Sites and Services console
(dssite.msc) via the "Replicate now" option, we may receive below error:
Dialog message text: The following error occurred during the attempt to
synchronize naming context <Naming Context> from Domain Controller
<Source-DC-Name> to Domain Controller <Destination-DC-Name>: Could not
find the domain controller for this domain.
Failure Message: Could not find the domain controller for this domain.
Buttons in Dialog: OK
Dialog message text: Active Directory could not create the NTDS Settings object for
this Domain Controller CN=NTDS Settings,CN=<DC_Name>,CN=Servers,CN=
<SiteName>,CN=Sites,CN=Configuration,<DomainDN> on the remove domain
controller <Remote_DC_FQDN>. Ensure the provided network credentials have
sufficient permissions.
Failure Message: Could not find the Domain Controller for this domain.
Buttons in Dialog: OK
[INFO] Error - Active Directory Domain Services could not create the NTDS Settings
object for this Active Directory Domain Controller CN=NTDS Settings,CN=CONTOSO-
DC02,CN=Servers,CN=Default-First-Site-
Name,CN=Sites,CN=Configuration,DC=Contoso,DC=com on the remote AD DC
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/ad-replication-error-1908-not-find-domain-controller 3/6
12/6/22, 7:35 AM AD Replication error 1908 - Windows Server | Microsoft Learn
permissions. (1908)
[INFO] NtdsInstall for Contoso.com returned 1908
[INFO] DsRolepInstallDs returned 1908
[ERROR] Failed to install to Directory Service (1908)
Cause
Error Code 1908 represents the error that displays as "Could not find the domain controller
for this domain." This error has two primary causes:
An important concept to understand for this scenario is that the KDC used for replication
operations may be:
a. The destination DC
b. The source DC
c. An entirely different DC (not the source or destination DC).
Resolution
1. Verify the Key Distribution Service is running on the Target Domain Controller
Discover the Kerberos Key Distribution Center you are contacting. It can be
discovered by using a packet capture program like Network Monitor 3.4 (Available
here. )
a. Use Network Monitor to capture the reproduced error message. (You may need to
stop the DNS client service first so that you see the DNS query traffic)
b. Review the packet capture for the DNS query for a KDC: Sample Address Queries:
_kerberos.tcp.<SiteName>._sites.dc._msdcs.<Domain>.com
_kerberos._tcp.dc._msdcs.<Domain>.com
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/ad-replication-error-1908-not-find-domain-controller 4/6
12/6/22, 7:35 AM AD Replication error 1908 - Windows Server | Microsoft Learn
is the KDC we discovered and 10.0.1.10 is the client requesting a ticket. It uses the
default Network Monitor Column layout.
d. Verify that 10.10.1.11's KDC and Netlogon services are running. On discovered
Domain Controller(10.0.1.11), verify the KDC and Netlogon service status with SC
Query
Example - Query the KDC service with: "SC Query KDC" and the Netlogon Service
with: "SC Query Netlogon" These commands should return "State: Running"
Console
Verify that the Domain Controller passes the Advertising and SYSVOLCHeck tests and
is advertising as a Key Distribution Center and SysVol is ready. If SysVol is not ready,
the server will not be able to advertise as a Domain Controller.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/ad-replication-error-1908-not-find-domain-controller 5/6
12/6/22, 7:35 AM AD Replication error 1908 - Windows Server | Microsoft Learn
Starting Test: SysVolCheck * The File Replication Service SYSVOL ready test
File Replication Service's SYSVOL is ready
..<DC Name> passed test SysVolCheck
3. Verify that source computer and target computer are within 5 minutes of each other.
More information
This error is one of the featured exercises in the following TechNet hands-on lab: TechNet
hands-on lab: Troubleshooting Active Directory replication errors
In this lab, you will walk through the troubleshooting, analysis, and implementation phases
of commonly encountered Active Directory replication errors. You will use a combination of
ADREPLSTATUS, repadmin.exe, and other tools to troubleshoot a five DC, three-domain
environment. AD replication errors encountered in the lab include -2146893022, 1256,
1908, 8453 and 8606.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/ad-replication-error-1908-not-find-domain-controller 6/6