Yeah, I've been doing the tcpdump dance on the AIX box that handles DNS/NTP for the legacy unix hosts (long story), I can see if I can set up a similar monitor on the DCs I suppose.

Looks like from reading the document it could take about 24 hours for the whole domain to sync to the correct time.<BR><BR>Also, it looks like the PDC checks the time server 3 times a day by ...

Once you’ve done that, restart your server. Once the server has rebooted, you need to remove the current smb.conf file as well as any Samba database file (*.tdb and *.ldb files).

At this point, your Samba Domain Controller is up and running, but there’s a problem. As is, Samba is working without DNS because your server defaults to systemd-resolved.

This should converge AD replication. Next, run sysdm.cpl command on the server that failed to promote as Domain Controller, and remove it from the domain forcibly. Next, remove the AD DS role.