As a consequence of the demotion attempts, the other DCs have this on their samba logs: [2016/04/29 20:46:47.344355, 0] ../source4/dsdb/repl/drepl_service.c:260(drepl_replica_sync) ../source4/dsdb/repl/drepl_service.c:260: Failure - Failed to find requested Naming Context. werr = WERR_DS_DRA_BAD_NC