Windows error 8633 (ERROR_DS_DRA_MISSING_KRBTGT

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: Required attributes of the local krbtgt object are missing for replication.

Previous	Next
ERROR_DS_MAPI_ID_NOT_AVAILABLE	ERROR_DS_DOMAIN_NAME_EXISTS_IN_FOREST

ERROR_DS_DRA_MISSING_KRBTGT_SECRET

ERROR_DS_DRA_MISSING_KRBTGT_SECRET (8633) is an Active Directory replication error. The local krbtgt object is missing attributes needed by the replication operation. This affects a core Kerberos account and should be handled as a directory-integrity incident, not by resetting passwords or creating replacement objects casually.

What to check

Collect Directory Service events and the exact affected object and naming context before any remediation.
Confirm whether the domain controller was restored, rebuilt, or recovered recently and whether the issue is isolated or replicated to other DCs.
Use an AD DS recovery plan appropriate for the forest; preserve evidence and avoid manual attribute edits to krbtgt.

Useful command

repadmin /showrepl <DestinationDC> /all /verbose

Microsoft: Diagnose AD replication failures · Microsoft: Troubleshoot stale replication partners · Microsoft: Troubleshoot AD replication problems

Looking for a different code? Search another status or error code.