Replication hasn’t occurred for longer than the tombstone lifetime

What it means

A domain controller hasn’t replicated with a partner for longer than the tombstone lifetime (usually 180 days).

Why it matters

Replicating now could reintroduce deleted objects ("lingering objects"). Replication is blocked to protect the directory.

What to do

• Don’t force replication.
• Usually the fix is to demote and rebuild the stale DC. Get expert help.

Find it with PowerShell

Get-WinEvent -MaxEvents 20 -FilterHashtable @{
  LogName = 'Directory Service'; Id = 2042
} | Select-Object TimeCreated, ProviderName, Message

Add -ComputerName SERVER to query another machine. Other event sources can reuse the same ID number, so check the ProviderName column.