Inside Windows® Server 2003

Loss of Key Replication Components

When a domain controller fails, its replication partners realize that it has stopped responding to update requests. The partners notify their KCC service, which sets to work creating connection objects that bypass the failed DC, something like Department of Transportation workers directing traffic around an accident.

When the failed domain controller returns to service, its replication partners realize that it is available once again and they inform their KCC service. The KCC rebuilds the connection objects to the domain controller and tears down the bypass.

This work can take a little time, so be patient. You should eventually see a note in the Event log that the KCC was able to create the connection objects ...