New DC errors

[nicholab]

I have added a new 2022 DC to my domain and all looked good, but i now see that DS forwarders are not validating?

 

I am also getting a DFSR Event of   There are warning or error events within the last 24 hours after the SYSVOL has been shared.  Failing SYSVOL replication problems may cause Group Policy problems.

 

The other DC are a Windows Server 2012 r2 that the one that needs to go and Windows Server 2016.

 

Any ideas on how I can fix these problems?

[nicholab]

Extra info

 

dfsrmig /GetMigrationState

The following domain controllers have not reached Global state ('Eliminated'):

Domain Controller (Local Migration State) - DC Type
===================================================

AzureADKerberos ('Start') - Read-Only DC

Migration has not yet reached a consistent state on all domain controllers.
State information might be stale due to Active Directory Domain Services latency.

[TwistedHelixis]

Think I had something similar last year.

 

Rather than trying to find a fix, as I was really busy, I turned off the new DC for a few days, just to make sure everything was OK, then I demoted the new DC, removed it from the domain and wiped it. Then when I had more time I started over and it worked fine.

 

Sorry I cant be more helpful.

[nicholab]

The answer to part 2 was removing the AzureADKerberos DC that a made up for Azure files Kerberos.

 

It now upgarded the Domian.