How to fix error error-ds-cant-access-remote-part-of-ad in Windows 11

Solution Steps

1. 1 Open Command Prompt as Administrator (Win+X, then select 'Terminal (Admin)'). We'll use built-in tools to diagnose.
2. 2 Check DNS resolution: Type 'nslookup ' and press Enter. Replace with the actual hostname. If it fails, DNS is misconfigured. Ensure the remote DC's IP is correctly registered in DNS.
3. 3 Verify network connectivity: Type 'ping ' and press Enter. If ping fails, check firewall rules. Ensure ports 135, 389, 445, and 49152-65535 are open between DCs.
4. 4 Check replication status: Type 'repadmin /replsummary' and press Enter. This shows replication health. Look for errors indicating access denied or connection failures.
5. 5 If replication fails, force replication: Type 'repadmin /syncall /AdeP' and press Enter. This attempts to synchronize with all partners. If it fails, the error might be due to permissions.
6. 6 Check permissions on the Active Directory partitions: Use ADSI Edit (adsiedit.msc) to verify that the 'Enterprise Domain Controllers' group has appropriate permissions on the directory partitions. Right-click the partition, select Properties, go to Security tab, and ensure the group has 'Full Control'.
7. 7 If permissions are fine, restart the Active Directory Domain Services service: Type 'net stop ntds' then 'net start ntds' in an elevated command prompt. This restarts the directory service and can clear temporary issues.
8. 8 If the problem persists, check the event logs for detailed error messages: Open Event Viewer (Win+R, type 'eventvwr.msc'), navigate to 'Windows Logs → Directory Service', and look for events with ID 8585. The details will give more clues.